Commit Graph

26229 Commits

Author SHA1 Message Date
renovate[bot]
37c3a75ce0 Update dependency pytest to v9
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-10 18:52:02 +00:00
openshift-merge-bot[bot]
cac0b3d4b6 Merge pull request #27489 from containers/renovate/google.golang.org-grpc-1.x
Update module google.golang.org/grpc to v1.76.0
2025-11-10 18:50:33 +00:00
openshift-merge-bot[bot]
2c40377dc9 Merge pull request #27472 from Luap99/test-fixes
various different test fixes
2025-11-10 15:03:16 +00:00
renovate[bot]
d0d10c4ccd Update module google.golang.org/grpc to v1.76.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-10 13:47:59 +00:00
openshift-merge-bot[bot]
80840578be Merge pull request #27395 from nalind/grpc-noop
Parse grpc requests on the service socket
2025-11-10 13:45:27 +00:00
openshift-merge-bot[bot]
c5906c0858 Merge pull request #27474 from containers/renovate/github.com-containers-psgo-1.x
Update module github.com/containers/psgo to v1.10.0
2025-11-10 13:42:42 +00:00
openshift-merge-bot[bot]
31b1ed8ed0 Merge pull request #27470 from baude/wslfixexit
Fix WSL machine start with --update-connection
2025-11-10 13:14:20 +00:00
openshift-merge-bot[bot]
06b0711252 Merge pull request #27479 from containers/renovate/golang.org-x-sys-0.x
Update module golang.org/x/sys to v0.38.0
2025-11-10 11:53:56 +00:00
renovate[bot]
9246307408 Update module golang.org/x/sys to v0.38.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-08 17:57:35 +00:00
renovate[bot]
b458ba0d49 Update module github.com/containers/psgo to v1.10.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-08 01:38:22 +00:00
openshift-merge-bot[bot]
0aa3f74ccd Merge pull request #27453 from containers/renovate/github.com-vbauerster-mpb-v8-8.x
Update module github.com/vbauerster/mpb/v8 to v8.11.1
2025-11-07 18:50:32 +00:00
openshift-merge-bot[bot]
82b5e4a38c Merge pull request #27459 from TomSweeneyRedHat/dev/tsweeney/cve-2025-53881-main
Bump to runc v1.3.3 - CVE-2025-52881
2025-11-07 18:09:09 +00:00
Paul Holzinger
3f87f0765d hack/bats: port it to use the new remote support
The system tests can setup their own server now so just use that and
don't require the user to spawn its own.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:56 +01:00
Paul Holzinger
950db09587 test/system: fix broken podman_runtime
This got broken during the remote testing rewrite to enable tls testing
in commit feb36e4fe6. The problem is the function didn't use the proper
podman command with the remote arg so it tried to connect to the default
socket with remote testing.

And in the checkpoint file we use it before the PODMAN_CMD was defined
so fix this by moving the basic_setup before and the use the variable
PODMAN_RUNTIME instead of having to do another info call.

Also fix the debug log output to correctly log the podman commands with
all arguments on a single line.

Fixes: feb36e4fe6 ("Implement TLS API Support")
Fixes: #27266

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:56 +01:00
Paul Holzinger
c31104f84e test/system: fix artifact test cleanup
Make sure to rmeove the artifact but we don't need to remove the
testfiles as they are part under PODMAN_TMPDIR which gets removed by
default so don't bother with that.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:56 +01:00
Paul Holzinger
09cf145f39 test/system: merge artifact tests into single file
There is no need for several files here, it just means the setup and
helpers get duplicated.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
348617fba6 test/system: rework artifact created test
- use nanoseconds, so we don't need to sleep a full second do put the
  time forward.
- use the --format option instead of jq
- run test via remote as well
- don't use static file content

Fixes: #27265

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
9eba688ffa test/system: remove 701-artifact-created.bats
The tests there are a duplicate compared to the 702 file.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
ad34a695de test/system: do not run artifact test in parallel
They do not seem safe to use concurrently, see #27264.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
f89e2d3ac8 test/system: skip flaky restore test on debian
Somehow this only flakes on debian as it seem the /etc/hosts file on the
host system changes and thus causes a false postive with the
before/after restore comparison.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
b63a210dd9 test/e2e: try to fix clean up after terminated build flake
It is failing with:
replacing mount point ".../root/overlay/xxx/merged": directory not empty

First, the build does not need network so ensure we don't leak network
allocations by killing it. Second, kill is always async so ensure to
wait for the actul build process exit.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:54 +01:00
Brent Baude
e059055aa5 Fix WSL machine start with --update-connection
In my previous PR, #27405, the optional WSL tests do not pass because of
an early return consistent with WSL's networking.  This PR corrects the
problem.

Fixes: #27469

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-11-07 10:41:32 -06:00
openshift-merge-bot[bot]
6a2f1cfecc Merge pull request #27467 from Luap99/new-images
CI: update VM images 06-11-2025
2025-11-07 15:36:16 +00:00
tomsweeneyredhat
871b008ddd Bump to runc v1.3.3 - CVE-2025-52881
Bump to runc v1.3.3 to address CVE-2025-52881

Fixes: https://issues.redhat.com/browse/RHEL-126638

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-11-07 10:05:06 -05:00
Paul Holzinger
1c3daa7c81 CI: update VM images 06-11-2025
from https://github.com/containers/automation_images/pull/417

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 14:07:38 +01:00
openshift-merge-bot[bot]
fc5c29d2ae Merge pull request #27463 from ricardobranco777/runc_133
test/system: Update test to handle new error message from runc 1.3.3
2025-11-07 12:48:53 +00:00
openshift-merge-bot[bot]
711c7dfbe4 Merge pull request #27361 from containers/renovate/major-github-artifact-actions
[skip-ci] Update GitHub Artifact Actions (major)
2025-11-07 11:39:56 +00:00
Ricardo Branco
14cb9d2a6c test/system: Update test to handle new error message from runc 1.3.3
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2025-11-07 11:54:06 +01:00
renovate[bot]
6493343ddc Update module github.com/vbauerster/mpb/v8 to v8.11.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-07 10:36:01 +00:00
openshift-merge-bot[bot]
905721cae5 Merge pull request #27458 from alessandro-verzicco/ignore-auth-json-empty
Fix authentication fallback when X-Registry-Auth header contains empty JSON object
2025-11-06 21:27:16 +00:00
openshift-merge-bot[bot]
75135e190c Merge pull request #27456 from Luap99/securejoin
update github.com/cyphar/filepath-securejoin to v0.5.1
2025-11-06 20:48:12 +00:00
Alessandro Verzicco
ac58beed26 Ignore auth header with empty JSON object
Signed-off-by: Alessandro Verzicco <152161683+alessandro-verzicco@users.noreply.github.com>
2025-11-06 17:39:56 +01:00
Paul Holzinger
a6f1c63c19 fix lint issues with github.com/cyphar/filepath-securejoin
The old location is deprecated and has been removed in v0.6.0 even. I
did this as extra commit to make cherry-picking easier.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 16:33:19 +01:00
Paul Holzinger
e0ef8362c0 update github.com/cyphar/filepath-securejoin to v0.5.1
Since this will be required by the runc security update I bump it hare
already to make the runc bump easier. Note while there is 0.6.0 out we
use 0.5.1 intentionally as 0.6 comes with breaking changes that won't
build in our dependencies.

Also note the lib now contains code licensed under MPL-2 which is not
yet approved by the CNCF[1] but because the runc fix requires it we were
advised to just go ahead and update it for now.

[1] https://github.com/cncf/foundation/issues/1154

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 16:33:18 +01:00
openshift-merge-bot[bot]
94c4951537 Merge pull request #27454 from Luap99/cgroup-bump
update github.com/opencontainers/cgroups to v0.0.6
2025-11-06 15:16:36 +00:00
Paul Holzinger
47ab0f1e94 update github.com/opencontainers/cgroups to v0.0.6
Includes one small fix for a breaking change in a type.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 14:39:04 +01:00
openshift-merge-bot[bot]
0405a470ef Merge pull request #27450 from nimdrak/27444
Fix tiny typos in some artifact docs
2025-11-06 13:28:09 +00:00
openshift-merge-bot[bot]
4609271590 Merge pull request #27420 from givensuman/T-27095-add-apparmor-quadlet-key
Add AppArmor key to quadlet containers
2025-11-06 11:23:35 +00:00
openshift-merge-bot[bot]
516ff3895a Merge pull request #27447 from containers/renovate/github.com-docker-docker-28.x
Update module github.com/docker/docker to v28.5.2+incompatible
2025-11-06 10:28:10 +00:00
openshift-merge-bot[bot]
ce561680bd Merge pull request #27431 from nimdrak/27421
Fixed #27421 aritfact push and pull with authfile
2025-11-06 10:08:39 +00:00
Byounguk Lee
469a8af9bb Fixes: #27444, Fix tiny typos in some artifact docs
Signed-off-by: Byounguk Lee <nimdrak@gmail.com>
2025-11-06 05:30:42 +00:00
Byounguk Lee
c581e0b392 Fixes #27421 aritfact push and pull with authfile
Signed-off-by: Byounguk Lee <nimdrak@gmail.com>
2025-11-06 05:26:36 +00:00
givensuman
e7b50c33df Add AppArmor key to quadlet .container files
Fixes: #27095
Signed-off-by: givensuman <givensuman@duck.com>
2025-11-05 18:15:52 -05:00
openshift-merge-bot[bot]
e603327974 Merge pull request #27441 from containers/renovate/github.com-containers-psgo-digest
Update github.com/containers/psgo digest to 533b50b
2025-11-05 21:00:03 +00:00
renovate[bot]
424c19b897 Update module github.com/docker/docker to v28.5.2+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-05 19:53:12 +00:00
openshift-merge-bot[bot]
23e6a89d36 Merge pull request #27379 from Honny1/fix-copyuidguid
Fix copyUIDGID parameter inversion in Docker compat API
2025-11-05 08:04:30 +00:00
renovate[bot]
f09508ffa5 Update github.com/containers/psgo digest to 533b50b
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-05 03:58:41 +00:00
openshift-merge-bot[bot]
2b646e7cb7 Merge pull request #27438 from Mr-Bossman/dev/neurolag
Fixed Commands in `podman-for-windows` Guide
2025-11-04 22:26:57 +00:00
openshift-merge-bot[bot]
17beac160c Merge pull request #27405 from baude/setdefaultconnection
Add `update-connection` to machine start and init
2025-11-04 20:03:58 +00:00
Manuel Thalmann
58c2fcd2d4 Fix incorrect function call
Changes made in this commit will fix #16168

The current command in the docs expect a `docker.exe` file to exist in the current working directory.
As this is most likely a typo, changes made in this commit fix this issue.

Signed-off-by: Manuel Thalmann <m@nuth.ch>
2025-11-04 12:56:01 -05:00