Commit Graph

22121 Commits

Author SHA1 Message Date
openshift-merge-bot[bot]
87896d3f43 Merge pull request #21963 from mheon/release_notes_500
[CI:DOCS] Add release notes for v5.0.0
2024-03-13 18:36:28 +00:00
Jason T. Greene
e58cb97de1 Change API socket to be machine name isolated
- Fixes conflicts such as removal of second machine deleting a socket of a
  the first machine while it's running
- Move API socket into runtime directory for consistency
- Add API and gvproxy sockets to removal list
- Cleanup related logic

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2024-03-13 13:28:14 -05:00
Paul Holzinger
dbf38779bd Makefile: drop tests-included from validate target
make validate should work locally, this check makes no sense in a local
context as it checks for a github label.
To fix this remove this check from the validate target and only use it
as part of the CI validate run.

While at it remove old dnf install step, the issue has been closed for a
long time and it should already be part of our base images.

Fixes #22031

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-13 18:17:43 +01:00
openshift-merge-bot[bot]
c25bfe1c8c Merge pull request #21864 from l0rd/compress-refactoring-v5-plus-plus
Machine decompress.go refactoring follow-up
2024-03-13 16:49:17 +00:00
openshift-merge-bot[bot]
cc495a9fac Merge pull request #22014 from baude/norqdpolicy
do not require policy.json
2024-03-13 15:21:12 +00:00
Matt Heon
0fdd83173f Add release notes for v5.0.0
Signed-off-by: Matt Heon <mheon@redhat.com>
2024-03-13 10:23:06 -04:00
openshift-merge-bot[bot]
469fd84688 Merge pull request #21883 from l0rd/winmake-win-gvproxy-target
Add target win-gvproxy in winmake.ps1
2024-03-13 14:17:57 +00:00
Brent Baude
d7bc7b7b41 do not require policy.json
we are having second thoughts about *requiring* a policy.json on podman
machine hosts.  we are concerned that we need to work out some more use
cases to be sure we do not make choices now that limit us in the near
term future. for example, should the policy files be the same for
container images and machine images? And should one live on the host
machine and the other live in the machine?

therefore, if a policy.json *is* present in the correct location, we will use and honor it; however, if it does not, we will allow the machine image to be pulled without a policy.

Signed-off-by: Brent Baude <baude@redhat.com>
Co-authored-by: Paul Holzinger <45212748+Luap99@users.noreply.github.com>
Signed-off-by: Brent Baude <bbaude@redhat.com>
2024-03-13 09:07:51 -05:00
Lokesh Mandvekar
60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+
This commit bumps containers-common dep such that passt and netavark become hard
deps for podman on fedora 40+.
Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2269148

With this commit, f40+ envs will use the min name-version-release for
containers-common-extra while other deps will use whatever's available.
This change can be reverted after a few releases to keep conditionals to
a minimum.

Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2024-03-13 17:56:38 +05:30
Mario Loriedo
82597144b6 Machine decompress.go refactoring follow-up
1. Added the xz decompression unit tests

2. Removed the xz implementation to use the one from c/images

3. Removed the specific macos gzip, zstd compressor and use
   the generic compressor but with SparseWriter if GOOS == darwin

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2024-03-13 00:58:50 +01:00
Mario Loriedo
abaa179aa0 Add target win-gvproxy in winmake.ps1
For consistency with linux/osx makefile
I have added the win-gvproxy target as
an alias of win-sshproxy

[NO NEW TESTS NEEDED]

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2024-03-13 00:45:10 +01:00
Denys Knertser
2ff5716b7e fix invalid HTTP header values when hijacking a connection
Signed-off-by: Denys Knertser <denys@avassa.io>
2024-03-12 23:05:25 +01:00
openshift-merge-bot[bot]
c2695fc9d2 Merge pull request #22026 from baude/finalmachineimageref
Add final machine endpoint
2024-03-12 16:50:59 +00:00
openshift-merge-bot[bot]
a7d38c6ea2 Merge pull request #22020 from Luap99/api-doc-version
[CI:DOCS] update API doc version to 5.0.0
2024-03-12 15:58:49 +00:00
Brent Baude
4c5d26f6f9 Add final machine endpoint
Adding the final machine endpoint as quay.io/podman/machine-os in the
Podman code.  As a reminder, we decided we would set this in containers
conf once things settle down and this code would then be removed.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2024-03-12 09:37:57 -05:00
Mario Loriedo
c6ae7fd145 Add doc to build podman on windows without MSYS
Updated build_windows.md with a new section that
document how to build and run the windows podman
client without the need to install MSYS.

[NO NEW TESTS NEEDED]

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2024-03-12 14:58:32 +01:00
Sascha Grunert
1901403eda Removing CRI-O related annotations
The annotations should be maintained by CRI-O itself to decouple the
projects from a dependency perspective.

[NO NEW TESTS NEEDED]

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
2024-03-12 14:56:06 +01:00
Paul Holzinger
068ddfd19f update API doc version to 5.0.0
Also update the website to display the correct swagger doc for the right
version, the 5.0 swagger file will not exist until we branch but I added
it anyway so we do not forget it.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-12 12:06:15 +01:00
renovate[bot]
83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-12 03:55:46 +00:00
Jasmin Oster
d7fa0aa351 Pass the restart policy to the individual containers
Healthchecks, defined in a .yaml file as livenessProbe did not had any
effect. They were executing as intended, containers were marked as
unhealthy, yet no action was taken. This was never the intended
behaviour, as observed by the comment:

> if restart policy is in place, ensure the health check enforces it

A minimal example is tracked in containers/podman#20903 [1] with the
following YAML:

```yaml
apiVersion: v1
kind: Pod
metadata:
  name: ubi-httpd-24
spec:
  restartPolicy: Always
  containers:
    - name: ubi8-httpd
      image: registry.access.redhat.com/rhscl/httpd-24-rhel7:2.4-217
      livenessProbe:
        httpGet:
          path: "/"
          port: 8081
```

By passing down the restart policy (and using constants instead of
actually wrong hard-coded ones), Podman actually restarts the container
now.

[1]: https://github.com/containers/podman/issues/20903

Closes #20903.

Signed-off-by: Jasmin Oster <nachtjasmin@posteo.de>
2024-03-11 20:39:54 +01:00
openshift-merge-bot[bot]
38e22d443c Merge pull request #21950 from cevich/move_podmanimage
[CI:DOCS] Migrate podman container image
2024-03-11 17:28:28 +00:00
openshift-merge-bot[bot]
1ed976ef2d Merge pull request #22012 from ashley-cui/rc6
Bump to 5.0.0-rc6
2024-03-11 16:41:26 +00:00
Ashley Cui
f2af295e44 Bump to 5.0.0-dev
Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-11 10:48:53 -04:00
Ashley Cui
d26113ca81 Bump to 5.0.0-rc6
Signed-off-by: Ashley Cui <acui@redhat.com>
v5.0.0-rc6
2024-03-11 10:48:18 -04:00
openshift-merge-bot[bot]
1cf9eb5db3 Merge pull request #21999 from eriksjolund/performance-guide-fix-URL
[CI:DOCS] performance: fix URL
2024-03-11 10:36:21 +00:00
openshift-merge-bot[bot]
6e0a9cbd47 Merge pull request #22007 from vrothberg/quadlet-docs
Quadlet docs
2024-03-11 10:24:45 +00:00
Valentin Rothberg
52ed774c23 docs: generate-systemd: add clarification statement
Based on user feedback, I think it's time to clarify that there are no
plans to remove generate-systemd.  Deprecation here means that the
command will not receive new features but only urgent bug fixes.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2024-03-11 09:03:36 +01:00
Valentin Rothberg
3d6758a61d docs: quadlet: improve docs on root/rootless dirs
Make the docs more explicit on which directories are read for root and
rootless users to avoid confusion [1].

[1] https://github.com/containers/podman/discussions/20218#discussioncomment-8721351

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2024-03-11 09:00:43 +01:00
Erik Sjölund
885dd2addf [CI:DOCS] performance: fix URL and kernel version requirement
Fix broken URL.

Fix kernel version requirement for native overlay rootless support.
Reference: https://www.redhat.com/sysadmin/podman-rootless-overlay

Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
2024-03-09 16:29:43 +01:00
openshift-merge-bot[bot]
76578e1b53 Merge pull request #21994 from cevich/rm_buildpush
[CI:DOCS] Remove outdated references
2024-03-08 19:03:58 +00:00
Chris Evich
e6ac569a14 [CI:DOCS] Remove outdated references
The container image build automation no longer lives here, it was moved
to containers/image_build.

Also strip out a few lingering comments referencing gitleaks, which was
removed from automation use.

Signed-off-by: Chris Evich <cevich@redhat.com>
2024-03-08 08:59:28 -05:00
openshift-merge-bot[bot]
642a8f13a5 Merge pull request #21992 from jesseborden/patch-1
Add note to performance.md for RHEL 8.5 overlayfs support
2024-03-08 13:13:34 +00:00
Jesse Borden
364813da65 Add note for RHEL 8.5
Add note for RHEL 8.5

Signed-off-by: Jesse Borden <40326854+jesseborden@users.noreply.github.com>
2024-03-08 07:02:24 -05:00
openshift-merge-bot[bot]
3c20e38cec Merge pull request #21989 from containers/renovate/go-gopkg.in/go-jose/go-jose.v2-vulnerability
Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
2024-03-08 10:01:05 +00:00
openshift-merge-bot[bot]
d7b2fc8f43 Merge pull request #21988 from containers/renovate/go-github.com/go-jose/go-jose/v3-vulnerability
Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
2024-03-08 09:58:17 +00:00
renovate[bot]
e220d1ce62 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:14:11 +00:00
renovate[bot]
f91b8e77b7 Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:13:56 +00:00
openshift-merge-bot[bot]
1cbedfb7d5 Merge pull request #21986 from ashley-cui/500rc5
Bump to 5.0.0-rc5
2024-03-08 02:10:41 +00:00
Ashley Cui
9b21a5b795 Bump to v5.0.0-dev
Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 18:42:58 -05:00
Ashley Cui
bbad09bb0e Bump to v5.0.0-rc5
Signed-off-by: Ashley Cui <acui@redhat.com>
v5.0.0-rc5
2024-03-07 18:42:46 -05:00
Ashley Cui
432f4fbf99 Fix Mac CI
Building arm podman needs to be the last thing built in the OSX cross task. The Mac tests rely this Podman binary to run, and the CI Mac is ARM-based

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 18:42:29 -05:00
openshift-merge-bot[bot]
45068124f0 Merge pull request #21985 from n1hility/fin-policy-json
Complete policy.json inclusion (Also add to win installer)
2024-03-07 21:13:38 +00:00
Jason T. Greene
d54a373996 Complete policy.json inclusion
- Sets default search location to always be the peer directory
  + make podman-remote now creates binaries that work the same as release zips
- Updates release zip to match expected search location
- Updates win installer to include the file if present in the repo cross-build
  archive

[NO NEW TESTS NEEDED]

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2024-03-07 14:05:22 -06:00
openshift-merge-bot[bot]
2e52b4fa78 Merge pull request #21982 from Luap99/machine-compose
podman compose: enable machine socket connection
2024-03-07 18:42:24 +00:00
openshift-merge-bot[bot]
9a888de557 Merge pull request #21973 from TomSweeneyRedHat/dev/tsweeney/buildahv1350
Bump Buildah to v1.35.0
2024-03-07 18:14:54 +00:00
openshift-merge-bot[bot]
4541f0c4ed Merge pull request #21980 from Luap99/machine-locking-fixes
more machine locking fixes
2024-03-07 16:51:37 +00:00
tomsweeneyredhat
b234bb55e4 Bump Buildah to v1.35.0
As the title says.  This is the last step in the vendor dance for
Podman v5.0.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-03-07 11:51:09 -05:00
openshift-merge-bot[bot]
f3dd5f132a Merge pull request #21978 from ashley-cui/fatbin
[CI:BUILD] Build universal Podman binary for Mac installer
2024-03-07 16:46:29 +00:00
openshift-merge-bot[bot]
15e508a639 Merge pull request #21936 from l0rd/vmfile-peek
Don't read full VM File before decompressing
2024-03-07 16:40:09 +00:00
openshift-merge-bot[bot]
bff78a12d6 Merge pull request #21975 from baude/libhvee0.7.0
vendor libhvee-0.7.0
2024-03-07 16:37:07 +00:00