20108 Commits

Author SHA1 Message Date
65bddfcd25 e2e: use ExitCleanly() in checkpoint tests
Ongoing steps toward RUN-1907: replace Exit(0) with ExitCleanly()

Clean command-line replace, with one manual reversion (commented)

And -- duh! -- skip the stderr check on Debian!

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-09-07 20:20:28 -06:00
c0d36b8ab8 Merge pull request #19894 from edsantiago/urgent_ci_fix
URGENT: fix broken CI
2023-09-07 17:49:13 -05:00
6f913f5f37 URGENT: fix broken CI
PR #19878 (checking for warnings in system tests) broke upgrade tests.

Reason: my long-ago "optimization" in which, if a PR touches only
tests in X, do not run tests in Y. Unfortunately, upgrade tests
rely on code in the system-test directory. I don't know if this
is fixable; nor if it's an acceptable tradeoff. Please discuss.

Sorry, everyone.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-09-07 14:05:30 -06:00
e546aebb32 Merge pull request #19889 from vrothberg/restart-kill
podman: don't restart after kill
2023-09-07 21:28:17 +02:00
0c72726f01 Merge pull request #19878 from edsantiago/bats_check_stderr
sys tests: run_podman: check for unwanted warnings/errors
2023-09-07 17:26:59 +02:00
16f2dd36bb Merge pull request #19887 from rhatdan/kube1
Tmpfs should not be mounted noexec
2023-09-07 16:19:24 +02:00
589867d716 podman: don't restart after kill
Also add a new `StoppedByUser` field to the container-inspect state
which can be useful during debugging and is now also used in the
regression test.  Note that I moved the `false` check one test above
such that we can compare the previous Podman version which should just
be stuck in the `wait $ctr` command since it will continue restarting.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-09-07 15:18:02 +02:00
2d7d8d1d10 Tmpfs should not be mounted noexec
The logic here makes little sense, basically the /tmp and /var/tmp are
always set noexec, while /run is not.  I don't see a reason to set any
of the three noexec by default.

Fixes: https://github.com/containers/podman/issues/19886

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-09-07 08:06:55 -04:00
c2575f726d sys tests: run_podman: check for unwanted warnings/errors
With few exceptions, commands that exit 0 should not emit any
messages with level=warning or =error. Let's start enforcing
that in run_podman.

Allow one-off exceptions, typically when we're testing an
actual warning condition (usual case: "podman stop" where it
times out to SIGKILL). Exceptions are specified via:

    run_podman 0+w subcommand...
               ^^^---- or, rarely, 0+e

"0" stands for "expect exit status 0", which is the default
so it's implicit anyway. The +w / +e (or even +we) is the
new part. I have added it to tests where necessary.

And, because life is what it is, add two global exceptions:

  - Debian. Because runc has too many flakes.
  - kube. Ditto. Kube commands emit lots of nasty error
    messages (yes, level=error) that don't seem to affect
    results.

Similar to #18442

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-09-07 05:35:21 -06:00
c17c190f89 Merge pull request #19882 from edsantiago/e2e_exitcleanly
e2e: use ExitCleanly() in attach & build tests
2023-09-07 12:27:05 +02:00
24e9e946cc Merge pull request #19883 from containers/renovate/setuptools-68.x
chore(deps): update dependency setuptools to ~=68.2.0
2023-09-07 06:23:28 -04:00
1211518e82 chore(deps): update dependency setuptools to ~=68.2.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-07 02:07:32 +00:00
465150f10c e2e: use ExitCleanly() in attach & build tests
Small steps toward RUN-1907: replace Exit(0) with ExitCleanly()
in ginkgo tests in two test files. Also, when practical,
replace ALPINE with CITEST_IMAGE.

There are still many thousands of instances left to fix. I will
be submitting in reviewable chunks.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-09-06 17:11:38 -06:00
c11ac807f9 Merge pull request #19759 from rhatdan/docs
[CI:DOCS] Some distros do not default to docker.io for shortname searches
2023-09-06 22:04:38 +02:00
27495981ce Some distros do not default to docker.io for shortname searches
Fixes: #18910

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-09-06 13:37:08 -04:00
af17ddaeed Merge pull request #19871 from giuseppe/accept-empty-capabilities
security: accept empty capabilities list
2023-09-06 17:16:52 +02:00
2806378c1a Merge pull request #19872 from edsantiago/systest_fix_eaddrinuse
systests: random_free_port: fix EADDRINUSE flake
2023-09-06 16:06:49 +02:00
74a7d61f5c Merge pull request #19869 from containers/renovate/github.com-cyphar-filepath-securejoin-0.x
fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
2023-09-06 16:04:17 +02:00
30abd7f1af security: accept empty capabilities list
allow the image to specify an empty list of capabilities, currently
podman chokes when the io.containers.capabilities specified in an
image does not contain at least one capability.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-09-06 14:55:28 +02:00
c32cfb1d01 systests: random_free_port: fix EADDRINUSE flake
Fixes infrequent but annoying flake in which system tests
call random_free_port(), get a nice-looking port, then
fail with "bind: address already in use".

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-09-06 06:10:40 -06:00
3e5b28b1d4 Merge pull request #19867 from siretart/siretart/tests/fcos
Restrict fcos_test to amd64, arm64
2023-09-06 11:05:22 +02:00
f14360f707 Merge pull request #19863 from mheon/fix_18874
Ignore spurious container-removal errors
2023-09-06 10:18:52 +02:00
d7b7b20831 Merge pull request #19866 from containers/renovate/github.com-containers-libhvee-digest
fix(deps): update github.com/containers/libhvee digest to 56fb235
2023-09-06 10:11:22 +02:00
3c0728df30 Merge pull request #19865 from containers/renovate/github.com-docker-docker-24.x
fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
2023-09-06 10:08:28 +02:00
1004f53d04 Merge pull request #19864 from containers/renovate/golang.org-x-tools-0.x
fix(deps): update module golang.org/x/tools to v0.13.0
2023-09-06 10:05:44 +02:00
a5798e9f5a fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-06 08:04:39 +00:00
14735f1724 Merge pull request #19862 from containers/renovate/golang.org-x-net-0.x
fix(deps): update module golang.org/x/net to v0.15.0
2023-09-06 10:02:55 +02:00
dbfc3e7e00 Restrict fcos_test to amd64, arm64
Allows tests to pass on i386 again

Signed-off-by: Reinhard Tartler <siretart@tauware.de>
2023-09-05 21:50:52 -04:00
7b2fc5f8d0 fix(deps): update github.com/containers/libhvee digest to 56fb235
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-06 01:06:39 +00:00
2aec77f1fe Merge pull request #19861 from edsantiago/manifest_test_cleanup
systests: manifest zstd test: lots of tiny cleanups
2023-09-06 01:04:35 +02:00
0a913d578d fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-05 22:18:41 +00:00
f9fd402210 fix(deps): update module golang.org/x/tools to v0.13.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-05 20:48:58 +00:00
52e1acf86c Merge pull request #19850 from containers/renovate/actions-checkout-4.x
[skip-ci] Update actions/checkout action to v4
2023-09-05 22:48:08 +02:00
71549c642f Ignore spurious container-removal errors
When removing a container's dependency, getting an error that the
container has already been removed (ErrNoSuchCtr and
ErrCtrRemoved) should not be fatal. We wanted the container gone,
it's gone, no need to error out.

[NO NEW TESTS NEEDED] This is a race and thus hard to test for.

Fixes #18874

Signed-off-by: Matt Heon <mheon@redhat.com>
2023-09-05 14:35:37 -04:00
e5bf0f96d7 fix(deps): update module golang.org/x/net to v0.15.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-05 18:05:34 +00:00
fdf694fcff systests: manifest zstd test: lots of tiny cleanups
Primarily, build test images FROM scratch, not alpine, to
avoid image pulls and network flakes and potential pull-
the-rug-out errors if the base alpine image changes.

This was much more complicated than it should've been,
because creating unique arch-specific FROM-scratch images
triggered a weird manifest bug, filed as #19860.

Also:
- add a teardown() to clean up manifests
- remove test for skopeo (skopeo is required for sys tests)
- remove unnecessary intermediate tmpdir
- deduplicate, by looping over amd+arm
- fix indentation
- and, finally, clean up dangling images (this was the initial
  reason behind my diving in here. Such a simple thing, I thought.)

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-09-05 11:36:29 -06:00
0e3b492faa Merge pull request #19849 from giuseppe/increase-inotify-watchers
machine: increase max number of inotify instances
2023-09-05 05:24:11 +02:00
8914caf476 Merge pull request #19843 from giuseppe/clamp-oom-score-adj
linux, rootless: clamp oom_score_adj if it is too low
2023-09-05 01:27:22 +02:00
203c2b815a Merge pull request #19854 from giuseppe/bump-runc-to-main
vendor: update github.com/opencontainers/runc to main
2023-09-05 01:24:41 +02:00
9730c03735 vendor: update github.com/opencontainers/runc to main
it is not possible yet to drop the override since the latest released
version has an indirect dependency on github.com/cilium/ebpf that
causes the binary to grow by ~1MB.  Once there is a new runc version,
we can drop the override.

For now just bump to the latest version on main, since we are using a
year old version at this point.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-09-04 15:58:23 +02:00
e825bd5d5e [skip-ci] Update actions/checkout action to v4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-04 12:51:33 +00:00
8b4a79a744 linux, rootless: clamp oom_score_adj if it is too low
when running rootless, if the specified oom_score_adj for the
container process is lower than the current value, clamp it to the
current value and print a warning.

Closes: https://github.com/containers/podman/issues/19829

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-09-04 14:44:14 +02:00
681b6db3f3 machine: increase max number of inotify instances
increase the number of inotify instances to 524288 instead of using
the default value of 128.

Closes: https://github.com/containers/podman/issues/19848

[NO NEW TESTS NEEDED]

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-09-04 14:02:57 +02:00
9bcab496e7 Merge pull request #19835 from Juneezee/refactor/redundant-nil-check
Remove redundant nil checks in system connection remove
2023-09-04 08:48:13 +02:00
8f7453f9c8 Merge pull request #19840 from containers/renovate/golang.org-x-term-0.x
fix(deps): update module golang.org/x/term to v0.12.0
2023-09-04 08:43:05 +02:00
302d153347 fix(deps): update module golang.org/x/term to v0.12.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-03 17:23:15 +00:00
d58fe4e68e Merge pull request #19837 from containers/renovate/golang.org-x-text-0.x
fix(deps): update module golang.org/x/text to v0.13.0
2023-09-03 15:36:10 +02:00
d6b538a794 Merge pull request #19836 from containers/renovate/golang.org-x-sys-0.x
fix(deps): update module golang.org/x/sys to v0.12.0
2023-09-03 15:32:45 +02:00
6f43c9f10d Merge pull request #19833 from containers/renovate/github.com-containers-libhvee-digest
fix(deps): update github.com/containers/libhvee digest to 2bf7930
2023-09-03 15:27:36 +02:00
f094884c1b Remove redundant nil checks in system connection remove
From the Go specification:

  "3. If the map is nil, the number of iterations is 0." [1]

Therefore, an additional nil check for before the loop is unnecessary.

[NO NEW TESTS NEEDED]

[1]: https://go.dev/ref/spec#For_range

Signed-off-by: Eng Zer Jun <engzerjun@gmail.com>
2023-09-03 15:42:41 +08:00