Commit Graph

26832 Commits

Author SHA1 Message Date
Paul Holzinger
9278b45424 bump go.mod to go 1.25
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-03-12 17:16:35 +01:00
Paul Holzinger
faa9b02d8f Merge pull request #28259 from timcoding1988/fix-subuid-trailing-newline
fix: add trailing newline to /etc/subgid for shadow-utils >= 4.19.0 (F44+)
2026-03-12 16:34:48 +01:00
Paul Holzinger
8960c6bd33 Merge pull request #28266 from ricardobranco777/arm64e2e
Fixes for running the e2e testsuite on architectures other than amd64
2026-03-12 16:19:15 +01:00
Ricardo Branco
cd2f122fb4 test/e2e: Skip some tests on non-amd64 architectures
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2026-03-12 15:18:04 +01:00
Ricardo Branco
a5dbe484d3 test/e2e: Introduce SkipIfNotAMD64 helper
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2026-03-12 14:53:05 +01:00
Ricardo Branco
e5f61281ff test/e2e: skip LINUX32 personality check on non-amd64 architectures
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2026-03-12 14:53:05 +01:00
Ricardo Branco
a4d0fd8853 test/e2e: Add linkat to seccomp profile
Some architectures (i.e., arm64) do not implement the link(2) system
call and ln(1) uses linkat(2) instead.

Use the names array to block both syscalls so the tests works on all
architectures.

Signed-off-by: Ricardo Branco <rbranco@suse.de>
2026-03-12 14:53:05 +01:00
Tim Zhou
0904bab01e add trailing newline to subgid due to shadow-utils 4.19.0 regression
Fedora 44 come with shadow-utils 4.19.0, This is a POSIX compliance fix - text files need end with a newline.
1. https://github.com/containers/podman-machine-os/issues/226
2. https://github.com/shadow-maint/shadow/issues/1581

Signed-off-by: Tim Zhou <tizhou@redhat.com>
2026-03-12 09:49:44 -04:00
Lokesh Mandvekar
65c9978c09 Merge pull request #28264 from timcoding1988/chore/swagger-doc-updates
chore(api): add swagger docs for undocumented API parameters
2026-03-12 19:15:43 +05:30
Ashley Cui
54634fb559 Merge pull request #28233 from Honny1/improve-relabel-err
Improve relabel EPERM error for rootless
2026-03-12 08:07:45 -04:00
Jan Rodák
d066546bda Merge pull request #28256 from containers/renovate/github.com-moby-moby-client-0.x
fix(deps): update module github.com/moby/moby/client to v0.3.0
2026-03-12 11:21:07 +01:00
Tim Zhou
a414460351 chore(api): add swagger docs for undocumented API parameters
Add documentation for undocumented API parameters across multiple endpoints:

System:
- POST /libpod/system/prune: all, volumes, external, build, filters

Pods:
- DELETE /libpod/pods/{name}: timeout
- GET /libpod/pods/stats: stream, delay

Volumes:
- DELETE /volumes/{name}: timeout
- DELETE /libpod/volumes/{name}: timeout

Containers:
- GET /libpod/containers/stats: all
- POST /libpod/containers/{name}/restart: timeout
- POST /libpod/containers/{name}/resize: running

Images:
- POST /images/create: retry, retryDelay
- GET /images/json: shared-size

Exec:
- POST /libpod/exec/{id}/resize: running

Generate:
- GET /libpod/generate/{name}/systemd: templateUnitFile

Signed-off-by: Tim Zhou <tizhou@redhat.com>
2026-03-11 23:19:30 -04:00
renovate[bot]
791ade7c31 fix(deps): update module github.com/moby/moby/client to v0.3.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 20:51:24 +00:00
Matt Heon
2ea88f0573 Merge pull request #28239 from Luap99/golangci-lint
update golangci-lint to v2.11.3
2026-03-11 16:49:12 -04:00
Jan Rodák
8df7bc8c66 Merge pull request #27702 from containers/renovate/pytest-9.x
chore(deps): update dependency pytest to v9.0.2
2026-03-11 16:46:22 +01:00
Ashley Cui
6aedada3d1 Merge pull request #27762 from containers/renovate/dessant-lock-threads-6.x
[skip-ci] Update dessant/lock-threads action to v6
2026-03-11 10:59:57 -04:00
Paul Holzinger
c534a05587 Merge pull request #28248 from containers/renovate/github.com-shirou-gopsutil-v4-4.x
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2
2026-03-11 14:49:00 +01:00
renovate[bot]
a57b1e72fd fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 12:27:53 +00:00
Jan Rodák
0ee8e7df79 Merge pull request #28246 from containers/renovate/zizmorcore-zizmor-action-0.x
[skip-ci] Update zizmorcore/zizmor-action action to v0.5.2
2026-03-11 13:25:05 +01:00
renovate[bot]
89d4fcd791 [skip-ci] Update zizmorcore/zizmor-action action to v0.5.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 09:26:04 +00:00
renovate[bot]
ed3d3688dc chore(deps): update dependency pytest to v9.0.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-11 09:19:21 +00:00
Paul Holzinger
4f1d4ae8a0 fix new lint issues from prealloc
Fix a few new issues reported by the linter update.

There is no need to copy the capAdd/capDrop slice in the compat create
endpoint as they are only read and not modified.
For the other code preallocate the slices so we safe memory allocations.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-03-10 19:45:35 +01:00
Paul Holzinger
1c21eed0fb update golangci-lint to v2.11.3
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-03-10 19:15:39 +01:00
Jan Rodák
35f9d61fcb Improve relabel EPERM error for rootless
Fixes: https://github.com/containers/podman/issues/27184

Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2026-03-10 14:17:26 +01:00
Jan Rodák
f7aefa46bb Merge pull request #28229 from giuseppe/fix-mount-opts-leak
specgen: fix pod mount options leaking between mounts
2026-03-10 12:40:15 +01:00
Giuseppe Scrivano
458fcaa1ba specgen: fix pod mount options leaking between mounts
Replace the JSON marshal/unmarshal round-trip in Inherit() with
copier.Copy. json.Unmarshal reuses existing slice backing arrays
and does not zero struct fields absent from the JSON (omitempty),
so mount options like "ro" from one mount would leak into another
mount at the same backing-array position.

Fixes the case where running:
  podman run --pod mypod \
    --mount type=bind,src=/a,target=/mylog \
    --mount type=bind,src=/b,target=/mytmp,ro=true \
    alpine touch /mylog/a

incorrectly fails with "Read-only file system" because /mylog
inherits "ro" from /mytmp.

Fixes: https://issues.redhat.com/browse/RHEL-154348

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2026-03-10 09:14:38 +01:00
Matt Heon
a003f564ee Merge pull request #28223 from jankaluza/namesgenerator
libpod: include names-generator.go
2026-03-09 12:43:31 -04:00
Jan Kaluza
8c4edb6121 libpod: include names-generator.go
In the moby/moby, the namesgenerator is internal. We still want to
depend on it, so this commit copies it from moby/moby to our code-base.

The good thing is the file is frozen upstream, so no more changes are
going to appear in it.

Fixes: #27536.

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2026-03-09 16:08:43 +01:00
Matt Heon
6b10beaba5 Merge pull request #28109 from simonbrauner/issue-22105
Make libpod return error status code on failure to pull image
2026-03-09 10:09:03 -04:00
Šimon Brauner
76095dbadc Make libpod return error status code on failure to pull image
Fixes: https://github.com/containers/podman/issues/22105

Signed-off-by: Šimon Brauner <sbrauner@redhat.com>
2026-03-09 14:26:14 +01:00
Lokesh Mandvekar
daadda83f1 Merge pull request #28210 from cyqsimon/quadlet-template-docs
Quadlet docs: add section on referencing other template Quadlets
2026-03-09 18:49:48 +05:30
Paul Holzinger
1c3cc92a5b Merge pull request #28057 from jankaluza/27536
api/compat: switch to moby/moby
2026-03-09 13:04:38 +01:00
Jan Kaluza
01688e7621 Deprecate Legacy structs and use port.String()
Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2026-03-09 11:09:28 +01:00
Jan Kaluza
c10f685b43 api/compat: Backport jsonmessage.JSONProgress.String()
The JSONProgress is not part of moby/moby API anymore:
f4127d76c5

To stay compatible with the previous client version, this commit backports
the jsonmessage.JSONProgress.String() and uses it to genereate
the progress report.

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2026-03-09 11:09:28 +01:00
Jan Kaluza
65585e4338 compat/network: Remove temporary ipvAddress variables.
Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2026-03-09 11:09:28 +01:00
Jan Kaluza
56e555bfc2 api/compat: switch to moby/moby
Replace github.com/docker/docker API imports with github.com/moby/moby
across compat handlers, swagger models, and tests to align with upstream
type definitions.

Fixes: #27536.

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2026-03-09 11:09:23 +01:00
Lokesh Mandvekar
5685ac5952 Merge pull request #28196 from MayorFaj/bug/28178-fix-cli-help-example-indentation
fix CLI help example indentation
2026-03-09 15:20:06 +05:30
cyqsimon
c30fe73dfb Quadlet docs: clarify behaviour of VolumeName default
Signed-off-by: cyqsimon <28627918+cyqsimon@users.noreply.github.com>
2026-03-09 11:54:05 +08:00
MayorFaj
31b956e0f1 Fix CLI help example indentation for multi-line examples
Signed-off-by: MayorFaj <mayorfaj@gmail.com>
2026-03-06 21:06:04 +00:00
Lokesh Mandvekar
014fd196d5 Merge pull request #28201 from Luap99/new-images
New images 2026-03-06
2026-03-06 21:27:05 +05:30
Paul Holzinger
5adac65c0a Merge pull request #28208 from mtrmac/tls-behavior-basics
Add --tls-details for (pull, push, run, login, logout)
2026-03-06 16:33:38 +01:00
Matt Heon
91035116ec Merge pull request #26203 from p12tic/log-labels
libpod: Implement --log-opt label=LABEL=Value
2026-03-06 10:05:07 -05:00
Paul Holzinger
dd83595619 New images 2026-03-06
Build in https://github.com/containers/automation_images/pull/434

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-03-06 14:48:48 +01:00
Povilas Kanapickas
636eb1a401 libpod: Implement --log-opt label=LABEL=Value
This allows things like compose project names to be associated with log
messages and later used in log processing and analysis.

Signed-off-by: Povilas Kanapickas <povilas@radix.lt>
2026-03-06 10:59:31 +02:00
cyqsimon
047e178298 Quadlet docs: add section on referencing other template Quadlets
Signed-off-by: cyqsimon <28627918+cyqsimon@users.noreply.github.com>
2026-03-06 16:40:22 +08:00
Miloslav Trmač
7fd3be8288 Add --tls-details support for (podman login) and (podman logout)
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-06 00:33:14 +01:00
Miloslav Trmač
13e1d5af4b PARTIALLY TESTED: Add --tls-details, use it to affect libimage and the like
For remote operation, start the remote service with --tls-details:
using --tls-details on the client side will only affect client's
connection.

This should eventually include many more tests - track down all current
uses of libpod.Runtime.{SystemContext,imageContext,LibimageRuntime}.
That will come later

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-05 23:13:17 +01:00
Matt Heon
b9da144e2d Merge pull request #27939 from l0rd/cp-ca-certs-doc
[Design Doc] New feature to import local CA certs
2026-03-05 09:20:40 -05:00
Miloslav Trmač
0d27a18a60 Merge pull request #28200 from Luap99/vendor
vendor: update container-libs to latest
2026-03-05 14:59:19 +01:00
Paul Holzinger
56ce3368be vendor: update container-libs to latest
This needs one fix for the API interface for download.FromURL() which was
changed.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-03-05 13:00:33 +01:00