14225 Commits

Author SHA1 Message Date
8c5b47f459 Merge pull request #13146 from cevich/dependabot_goterm
Bump github.com/buger/goterm from 1.0.1 to 1.0.4
2022-02-04 13:21:07 -05:00
ec390d5d35 Merge pull request #13143 from Luap99/dns
append podman dns search domain
2022-02-04 11:49:11 -05:00
d733c3baa2 append podman dns search domain
Append the podman dns seach domain to the host search domains when we
use the dnsname/aardvark server. Previously it would only use podman
seach domains and discard the host domains.

Fixes #13103

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-02-04 16:16:06 +01:00
956664f65b Merge pull request #12930 from cdoern/podCgroup
Podman pod create --share-parent vs --share=cgroup
2022-02-04 09:41:12 -05:00
2a48a88629 Merge pull request #13134 from edsantiago/bats
System tests: revert emergency skip of checkpoint tests
2022-02-04 09:39:11 -05:00
320e2935c8 Merge pull request #13136 from rhatdan/VENDOR
Update containers/buildah v1.24.1
2022-02-04 08:53:42 -05:00
54cf0f05e3 Bump github.com/buger/goterm from 1.0.1 to 1.0.4
Bumps [github.com/buger/goterm](https://github.com/buger/goterm) from 1.0.1 to 1.0.4.
- [Release notes](https://github.com/buger/goterm/releases)
- [Commits](https://github.com/buger/goterm/compare/v1.0.1...v1.0.4)

---
updated-dependencies:
- dependency-name: github.com/buger/goterm
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-04 12:08:41 +00:00
1d1b2b1509 Update containers/buildah v1.24.1
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-03 18:33:22 -05:00
7cfe4d3fe7 System tests: revert emergency skip of checkpoint tests
Revert #13049. criu-3.16.1-6.fc36 fixes the problem and is
now in fc36 stable:

   https://bodhi.fedoraproject.org/updates/FEDORA-2022-183b337712

(Yes, I confirmed that tests pass on a rawhide vm)

Signed-off-by: Ed Santiago <santiago@redhat.com>
2022-02-03 14:48:35 -07:00
608b6142ed Merge pull request #13024 from cevich/netavark_system
Cirrus: Add netavark/aardvark system test task
2022-02-03 15:37:19 -05:00
e1ed5a9d9c Merge pull request #13131 from containers/dependabot/go_modules/github.com/containers/common-0.47.3
Bump github.com/containers/common from 0.47.2 to 0.47.3
2022-02-03 15:35:08 -05:00
185dc5b2f3 Bump github.com/containers/common from 0.47.2 to 0.47.3
Bumps [github.com/containers/common](https://github.com/containers/common) from 0.47.2 to 0.47.3.
- [Release notes](https://github.com/containers/common/releases)
- [Commits](https://github.com/containers/common/compare/v0.47.2...v0.47.3)

---
updated-dependencies:
- dependency-name: github.com/containers/common
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-03 18:39:37 +00:00
e30edd6d8e Merge pull request #13127 from containers/dependabot/go_modules/github.com/containers/image/v5-5.19.1
Bump github.com/containers/image/v5 from 5.19.0 to 5.19.1
2022-02-03 13:14:41 -05:00
642a691cbb Cirrus: Add netavark/aardvark system test task
Also add a system-test that verifies netavark driver is in use when
magic env. var. is set.

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-02-03 13:07:56 -05:00
daf51eafee Bump github.com/containers/image/v5 from 5.19.0 to 5.19.1
Bumps [github.com/containers/image/v5](https://github.com/containers/image) from 5.19.0 to 5.19.1.
- [Release notes](https://github.com/containers/image/releases)
- [Commits](https://github.com/containers/image/compare/v5.19.0...v5.19.1)

---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-03 16:25:23 +00:00
ebbf10ae8c Cirrus: Log netavark/aardvark binary build info.
Enabled by:
* https://github.com/containers/netavark/pull/191
* https://github.com/containers/aardvark-dns/pull/36

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-02-03 11:03:20 -05:00
2cc3274289 Merge pull request #13125 from nalind/url-docs
[CI:DOCS] Document `schema` values in the `--url` flag
2022-02-03 10:07:20 -05:00
722ccaee38 Merge pull request #13047 from cdoern/scpSyntax
podman image scp syntax correction
2022-02-03 10:05:22 -05:00
08930b24b9 Merge pull request #13117 from Luap99/resolv
Revert "Move each search dns to its own line"
2022-02-03 09:37:20 -05:00
9eb88ea474 Podman pod create --share-parent vs --share=cgroup
separated cgroupNS sharing from setting the pod as the cgroup parent,
made a new flag --share-parent which sets the pod as the cgroup parent for all
containers entering the pod

remove cgroup from the default kernel namespaces since we want the same default behavior as before which is just the cgroup parent.

resolves #12765

Signed-off-by: cdoern <cdoern@redhat.com>
Signed-off-by: cdoern <cbdoer23@g.holycross.edu>
Signed-off-by: cdoern <cdoern@redhat.com>
2022-02-03 09:30:17 -05:00
51cc0edfee Merge pull request #13121 from ydayagi/resourcefieldref
play kube envVar.valueFrom.resourceFieldRef
2022-02-03 09:19:18 -05:00
ababa93ec5 Merge pull request #13116 from Luap99/reset-networks
system prune: remove all networks
2022-02-03 08:43:16 -05:00
55c4a1468b system prune: remove all networks
podman system prune should also remove all networks. When we want to
users to migrate to the new network stack we recommend to run podman
system reset. However this did not remove networks and if there were
still networks around we would continue to use cni since this was
considered an old system.

There is one exception for the default network. It should not be removed
since this could cause other issues when it no longer exists. The
network backend detection logic ignores the default network so this is
fine.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-02-03 13:14:07 +01:00
f2263fade4 Merge pull request #13120 from nalind/slashify-dockerfile
pkg/bindings/images.Build(): slashify "dockerfile" values, too
2022-02-03 04:01:15 -05:00
fee76f6abc Document schema values in the --url flag
Document the recognized `schema` types that can be used in a value
passed to the `--url` command line flag.

[CI:DOCS]

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-02-02 18:07:10 -05:00
89f71177aa Merge pull request #12859 from baude/netavarke2e
Enable e2e tests with netavark
2022-02-02 16:41:26 -05:00
b4c96535ea Merge pull request #13118 from edsantiago/bats
hack/bats: fix broken usage message
2022-02-02 16:23:24 -05:00
5468757ad7 play kube envVar.valueFrom.resourceFieldRef
add support for env vars values from container resources
see https://kubernetes.io/docs/reference/generated/kubernetes-api/v1.19/#envvarsource-v1-core

relates to issue https://github.com/containers/podman/issues/12756

Signed-off-by: Yaron Dayagi <ydayagi@redhat.com>
2022-02-02 22:34:54 +02:00
725a6f8939 pkg/bindings/images.Build(): slashify "dockerfile" values, too
When the Dockerfile isn't in the root directory of the build context,
the client supplies its pathname to the server, but it needs to do so
using "/" as the path separator, not the client OS's path separator.

CI can't test Windows clients, so
[NO NEW TESTS NEEDED]

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-02-02 14:05:20 -05:00
7d3ad6081f netavark e2e tests
enabled e2e tests for netavark

Signed-off-by: Brent Baude <bbaude@redhat.com>
2022-02-02 13:03:45 -06:00
25e073492f Revert "Move each search dns to its own line"
This reverts commit a1bc8cb52cefd49e8cc54ae14d1864b8a1ec216e.
Please see resolv.conf(5) search domains must be on the same line. If
you use multiple seach key words only the last one is used. I tested this
with alpine and it works correctly when they are on the same line so I
am not sure what issues Dan had with it but this is not correct.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-02-02 19:33:21 +01:00
3d3e8d8f8a hack/bats: fix broken usage message
I am so, so sorry.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2022-02-02 11:26:22 -07:00
21a8ee9044 Merge pull request #13089 from rhatdan/resolv.conf
Only change network fields if they were actually changed by the user
2022-02-02 12:35:30 -05:00
2739b3ca85 Merge pull request #13114 from cevich/minor_cirrus
[CI:DOCS] Cirrus: Restrict special/limited-use task
2022-02-02 11:33:25 -05:00
903f9a3a28 Cirrus: Minor - limit release task applicability
This task/test is guaranteed to fail on non-release PRs.  Upon
reviewing actual practice and the release docs, this task should be
limited to PRs with a title containing `release` or `bump` keywords.
Also fix a minor comment typo.

Ref:
https://github.com/containers/podman/pull/13106#pullrequestreview-869855449

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-02-02 11:07:51 -05:00
a1bc8cb52c Move each search dns to its own line
Alpine does not seem to use search correctly when there are multiple
search domains on the same line. It only uses the first with the advent.
When podman runs within a separate network we are appending on
dns.podman as a search, if you add a search domain, then this causes the
local search on network to fail.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-02 11:01:09 -05:00
56a1c76ad3 Merge pull request #13104 from giuseppe/fix-podman-stats-comment
[CI:DOCS] docs: clarify rootless net stats
2022-02-02 10:41:27 -05:00
4ddc4e79d7 Only change network fields if they were actually changed by the user
Fixes: https://github.com/containers/podman/issues/13065

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-02 10:28:34 -05:00
dc0dc6a557 Merge pull request #13079 from TomSweeneyRedHat/dev/tsweeney/hellow
[CI:DOCS] Add a hello world image to quay.io
2022-02-02 10:06:45 -05:00
72c505a181 Merge pull request #13107 from rhatdan/shm
Fix size to match Docker selection
2022-02-02 09:36:45 -05:00
c2d0011b72 Merge pull request #13110 from giuseppe/enforce-dev-shm-with-noexec-nosuid-nodev
libpod: enforce noexec,nosuid,nodev for /dev/shm
2022-02-02 08:52:42 -05:00
681f76e8b0 Merge pull request #13106 from cevich/not_build
Cirrus: Add [CI:BUILD] magic that only builds
2022-02-02 08:02:41 -05:00
c4dfd004ad libpod: enforce noexec,nosuid,nodev for /dev/shm
these mount flags are already used for the /dev/shm mount on the host,
but they are not set for the bind mount itself.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-02-02 10:03:18 +01:00
b6fe7d1191 Fix size to match Docker selection
Fixes: https://github.com/containers/podman/issues/13096

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-01 17:19:19 -05:00
012e24b791 [CI:DOCS] Add a hello world image to quay.io
[NO NEW TESTS NEEDED]

This commit describes how to run the quay.io/podman/hello
image.  It also contains the files necessary to build that
image localy, and a README.md explaining the image and how
to build it.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2022-02-01 16:35:33 -05:00
6f491e21aa Merge pull request #13105 from lsm5/copr-fix-dependencies
COPR: fix dependencies
2022-02-01 16:15:33 -05:00
852ca9a7a0 Cirrus: Add [CI:BUILD] magic that only builds
This is intended for cases where no code changes were made in this repo.
but something did change which could affect the toolchain.  For example,
`Makefile` or packaging changes.

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-02-01 16:13:34 -05:00
60528b9c99 Merge pull request #13066 from rhatdan/man
Clarify remote client means Mac and Windows
2022-02-01 15:41:36 -05:00
71c3bdba0e Merge pull request #13085 from ydayagi/main
play kube envVar.valueFrom.fieldRef
2022-02-01 15:31:37 -05:00
ef9a734d6e Merge pull request #12814 from cevich/netavark
Cirrus: Add e2e task w/ upstream netavark
2022-02-01 14:55:36 -05:00