Commit Graph

26199 Commits

Author SHA1 Message Date
openshift-merge-bot[bot]
711c7dfbe4 Merge pull request #27361 from containers/renovate/major-github-artifact-actions
[skip-ci] Update GitHub Artifact Actions (major)
2025-11-07 11:39:56 +00:00
openshift-merge-bot[bot]
905721cae5 Merge pull request #27458 from alessandro-verzicco/ignore-auth-json-empty
Fix authentication fallback when X-Registry-Auth header contains empty JSON object
2025-11-06 21:27:16 +00:00
openshift-merge-bot[bot]
75135e190c Merge pull request #27456 from Luap99/securejoin
update github.com/cyphar/filepath-securejoin to v0.5.1
2025-11-06 20:48:12 +00:00
Alessandro Verzicco
ac58beed26 Ignore auth header with empty JSON object
Signed-off-by: Alessandro Verzicco <152161683+alessandro-verzicco@users.noreply.github.com>
2025-11-06 17:39:56 +01:00
Paul Holzinger
a6f1c63c19 fix lint issues with github.com/cyphar/filepath-securejoin
The old location is deprecated and has been removed in v0.6.0 even. I
did this as extra commit to make cherry-picking easier.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 16:33:19 +01:00
Paul Holzinger
e0ef8362c0 update github.com/cyphar/filepath-securejoin to v0.5.1
Since this will be required by the runc security update I bump it hare
already to make the runc bump easier. Note while there is 0.6.0 out we
use 0.5.1 intentionally as 0.6 comes with breaking changes that won't
build in our dependencies.

Also note the lib now contains code licensed under MPL-2 which is not
yet approved by the CNCF[1] but because the runc fix requires it we were
advised to just go ahead and update it for now.

[1] https://github.com/cncf/foundation/issues/1154

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 16:33:18 +01:00
openshift-merge-bot[bot]
94c4951537 Merge pull request #27454 from Luap99/cgroup-bump
update github.com/opencontainers/cgroups to v0.0.6
2025-11-06 15:16:36 +00:00
Paul Holzinger
47ab0f1e94 update github.com/opencontainers/cgroups to v0.0.6
Includes one small fix for a breaking change in a type.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 14:39:04 +01:00
openshift-merge-bot[bot]
0405a470ef Merge pull request #27450 from nimdrak/27444
Fix tiny typos in some artifact docs
2025-11-06 13:28:09 +00:00
openshift-merge-bot[bot]
4609271590 Merge pull request #27420 from givensuman/T-27095-add-apparmor-quadlet-key
Add AppArmor key to quadlet containers
2025-11-06 11:23:35 +00:00
openshift-merge-bot[bot]
516ff3895a Merge pull request #27447 from containers/renovate/github.com-docker-docker-28.x
Update module github.com/docker/docker to v28.5.2+incompatible
2025-11-06 10:28:10 +00:00
openshift-merge-bot[bot]
ce561680bd Merge pull request #27431 from nimdrak/27421
Fixed #27421 aritfact push and pull with authfile
2025-11-06 10:08:39 +00:00
Byounguk Lee
469a8af9bb Fixes: #27444, Fix tiny typos in some artifact docs
Signed-off-by: Byounguk Lee <nimdrak@gmail.com>
2025-11-06 05:30:42 +00:00
Byounguk Lee
c581e0b392 Fixes #27421 aritfact push and pull with authfile
Signed-off-by: Byounguk Lee <nimdrak@gmail.com>
2025-11-06 05:26:36 +00:00
givensuman
e7b50c33df Add AppArmor key to quadlet .container files
Fixes: #27095
Signed-off-by: givensuman <givensuman@duck.com>
2025-11-05 18:15:52 -05:00
openshift-merge-bot[bot]
e603327974 Merge pull request #27441 from containers/renovate/github.com-containers-psgo-digest
Update github.com/containers/psgo digest to 533b50b
2025-11-05 21:00:03 +00:00
renovate[bot]
424c19b897 Update module github.com/docker/docker to v28.5.2+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-05 19:53:12 +00:00
openshift-merge-bot[bot]
23e6a89d36 Merge pull request #27379 from Honny1/fix-copyuidguid
Fix copyUIDGID parameter inversion in Docker compat API
2025-11-05 08:04:30 +00:00
renovate[bot]
f09508ffa5 Update github.com/containers/psgo digest to 533b50b
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-05 03:58:41 +00:00
openshift-merge-bot[bot]
2b646e7cb7 Merge pull request #27438 from Mr-Bossman/dev/neurolag
Fixed Commands in `podman-for-windows` Guide
2025-11-04 22:26:57 +00:00
openshift-merge-bot[bot]
17beac160c Merge pull request #27405 from baude/setdefaultconnection
Add `update-connection` to machine start and init
2025-11-04 20:03:58 +00:00
Manuel Thalmann
58c2fcd2d4 Fix incorrect function call
Changes made in this commit will fix #16168

The current command in the docs expect a `docker.exe` file to exist in the current working directory.
As this is most likely a typo, changes made in this commit fix this issue.

Signed-off-by: Manuel Thalmann <m@nuth.ch>
2025-11-04 12:56:01 -05:00
Manuel Thalmann
2e84246ad5 Update docs for most recent Windows version
In more recent Windows 11 versions (not sure about Windows 10),
Windows now ships its own `curl.exe`,
so PowerShell's "curl"-alias no longer exists.

Changes made in this commit will replace the `curl` alias call with the actual `Invoke-WebRequest` function.

Signed-off-by: Manuel Thalmann <m@nuth.ch>
2025-11-04 12:55:51 -05:00
Brent Baude
623cb5f539 Bumping timeout for aarch64 machine
Bumping the timeout for aarch64 machine tests as I am getting a
consistent timeout where the tests are not completing in the given time.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-11-04 10:35:51 -06:00
Brent Baude
b4ec460ed4 Add update-connection to machine start and init
This allows users to set the associated machine's system connection to the system default when running `podman machine init --now` or `podman machine start`.  It also changes the default bbehavior of these commands in that the user will be prompted and asked if they would like to switch the system connection.  It also introduces a command line switch called `--update-connection`.  If the switch is unset, then the user will be prmpted.  If the command value is explicitly set to `false`, the user will not be prompted and the system connection will not be altered.  If the value is set to `true`, the system connection will be made the default and the user will not be prompted.

Fixes: https://issues.redhat.com/browse/RUN-3632

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-11-04 10:35:28 -06:00
openshift-merge-bot[bot]
53ef23df38 Merge pull request #27435 from timcoding1988/rotate_aws_keys
rotate aws meta_task keys
2025-11-04 15:45:42 +00:00
openshift-merge-bot[bot]
eb63a1f38d Merge pull request #27005 from zifeitong/newer
Fix podman build "newer" pull policy
2025-11-04 15:17:37 +00:00
Tim Zhou
f06f77468d rotate aws meta_task keys
Signed-off-by: Tim Zhou <tizhou@redhat.com>
2025-11-04 09:05:45 -05:00
openshift-merge-bot[bot]
5d0458672a Merge pull request #27430 from l0rd/fix-wsl-image-cache-mismatch
Fix cache misses when pulling WSL machine image
2025-11-04 13:54:52 +00:00
openshift-merge-bot[bot]
14dee39b08 Merge pull request #27140 from LecrisUT/tmt-integration
Add tmt integration plan
2025-11-04 13:07:55 +00:00
openshift-merge-bot[bot]
d8a0852140 Merge pull request #27428 from slp/krunkit-1.1.1
Bump bundled krunkit from 1.1.0 to 1.1.1
2025-11-04 13:02:29 +00:00
Cristian Le
01f1d1ecec Add tmt integration plan
See:
- https://github.com/teemtee/tmt/issues/4047
- https://github.com/teemtee/tmt/pull/4026

Signed-off-by: Cristian Le <git@lecris.dev>
2025-11-04 12:33:00 +01:00
openshift-merge-bot[bot]
4bd8730063 Merge pull request #27425 from shiavm006/fix-remote-detach-keys-empty-string
Fix remote client rejecting empty --detach-keys string
2025-11-04 11:17:12 +00:00
Mario Loriedo
7c51ad0ef8 Fix cache misses when pulling WSL machine image
Fixes a regression introduced by b2e6d53 that made always failing the
match of the WSL image from the registry with the image in the local
cache. The result was that the WSL machine image was always pulled from
quay.io even if an identical image was in the local cache.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-11-04 12:12:10 +01:00
Sergio Lopez
f2aceb829f Bump bundled krunkit from 1.1.0 to 1.1.1
Bump bundled krunkit to 1.1.1. This is a minor, expedited release
to fix a library linking problem.

Fixes: #27427
Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-11-04 10:09:09 +01:00
shiavm006
c0ae1a9bac Fix remote client rejecting empty --detach-keys string
The remote client (podman --remote) was incorrectly throwing an error
when --detach-keys="" was specified for attach, run, or start commands.
According to documentation and the v1.7.0 release notes, specifying an
empty string should disable detaching, not cause an error.

Fixes: #27414

Signed-off-by: shiavm006 <shivammittal42006@gmail.com>
2025-11-04 09:12:02 +05:30
openshift-merge-bot[bot]
020a59732a Merge pull request #27418 from cgwalters/drop-container-runtime
Makefile: Drop unused CONTAINER_RUNTIME
2025-11-03 19:53:19 +00:00
openshift-merge-bot[bot]
53d976bfee Merge pull request #27389 from containers/renovate/github.com-onsi-ginkgo-v2-2.x
fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.2
2025-11-03 19:22:43 +00:00
Colin Walters
ac888c73ef Makefile: Drop dead CONTAINER_RUNTIME
This variable is dead code as far as I can tell. I think it
got cargo culted from something similar in skopeo, where it *is*
used:
85598438ce/Makefile (L75)
etc.

(Instead it looks like there's a `PODMANCMD` here)

But I'm effectively using this PR as a way to suggest aligning
with what we're doing in bootc, where we have a core principle
that `Makefile` should *never* itself spawn containers (or VMs etc).
All the rules in Makefile are things that should work when e.g.
building RPMs or debs or the like.

Those tasks are things that are done via `Justfile`:
https://github.com/bootc-dev/bootc/blob/main/Justfile

So for example to align, we'd add a `Justfile` here and then
`make validatepr` would move to `just validatepr`.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-11-03 10:27:14 -05:00
openshift-merge-bot[bot]
a7da73cef4 Merge pull request #27422 from containers/renovate/github.com-shirou-gopsutil-v4-4.x
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.10
2025-11-03 14:41:03 +00:00
renovate[bot]
df7f14afb1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-03 14:38:59 +00:00
renovate[bot]
b309044006 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.10
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-01 03:08:38 +00:00
openshift-merge-bot[bot]
8aea109e42 Merge pull request #27333 from Honny1/search-tests-without-net
Eliminate network dependencies in `podman search` e2e tests with mock registry
2025-10-31 19:33:10 +00:00
openshift-merge-bot[bot]
6b731284f8 Merge pull request #27400 from lsm5/cncf-self-assessment
cncf: self-assessment doc
2025-10-31 13:18:07 +00:00
openshift-merge-bot[bot]
87b16eb6c9 Merge pull request #27406 from baude/prchecklist
Update gh pull request template
2025-10-30 18:43:48 +00:00
Lokesh Mandvekar
41ff61aba2 vendor neutral language, NIST database for known issues
Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-10-30 14:37:42 -04:00
openshift-merge-bot[bot]
69b397af49 Merge pull request #27410 from baude/fixdupmachinenames
Fix use of duplicate machine names
2025-10-30 14:32:16 +00:00
Brent Baude
46c428cd30 Update gh pull request template
Perhaps exposing some our critical pull requests requirements in a checklist might help users.  As of now, we do this as a "soft open".

Co-authored-by: Jan Rodák <hony.com@seznam.cz>
Co-authored-by: Ashley Cui <ashleycui16@gmail.com>
Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-10-30 08:58:28 -05:00
Brent Baude
553c4a16d5 Fix use of duplicate machine names
A condition was changed in the refgactor of init where duplicate names would be allowed but no machine was created.  Duplicate names are not permitted and should return an error.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-10-30 07:50:08 -05:00
openshift-merge-bot[bot]
937636b8d7 Merge pull request #27408 from ashley-cui/wix
Allow RC Windows Installer to be built
2025-10-30 09:38:41 +00:00