25020 Commits

Author SHA1 Message Date
a3e132055d Merge pull request #25909 from baude/issue25884
Add ability to set layer media type for artifacts
2025-04-22 19:21:14 +00:00
9180f55953 Merge pull request #25893 from Luap99/new-images-f42
New images f42
2025-04-22 19:13:01 +00:00
7a009cc14b Merge pull request #25688 from evidolob/use-gvisor-from-gomod
Use gvisor-tap-vsock version from go.mod file
2025-04-22 18:34:20 +00:00
ce0617eac4 Use gvisor-tap-vsock version from go.mod file
Instead of hardcoding gvisor version in different build files, we get gvisor version from go.mod file.

Signed-off-by: Yevhen Vydolob <yvydolob@redhat.com>
2025-04-22 18:44:04 +02:00
9a0f013f0a Revert "cirrus: test only on f41/rawhide"
This reverts commit 05fc9d2d6b4c81d9f19272bea9d319c5c36cfe02.

Images use fedora f42 now.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-22 16:32:49 +02:00
b0df21edef New images 2025-04-16
https://github.com/containers/automation_images/pull/404

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-22 16:32:48 +02:00
a75cba011e Merge pull request #25944 from containers/renovate/github.com-docker-docker-28.x
fix(deps): update module github.com/docker/docker to v28.1.1+incompatible
2025-04-22 13:59:56 +00:00
5372c15bf8 Merge pull request #25892 from Regis-Caelum/quadlet-pod-hostname
Add HostName to quadlet pod
2025-04-22 12:52:04 +00:00
18de85bb14 Merge pull request #25940 from TomSweeneyRedHat/dev/tsweeney/bud_readme
[CI DOCS] Touchup buildah-bud README.md
2025-04-22 12:46:37 +00:00
590e019240 fix(deps): update module github.com/docker/docker to v28.1.1+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-22 12:45:23 +00:00
3c6a593485 Merge pull request #25917 from benoitf/vfkit-upgrade
feat: update vfkit binary to v0.6.1 in macOS installer
2025-04-22 12:43:49 +00:00
58c6d84bdd Merge pull request #25916 from containers/renovate/github.com-docker-docker-28.x
fix(deps): update module github.com/docker/docker to v28.1.0+incompatible
2025-04-22 11:43:06 +00:00
a19b100cc6 Merge pull request #25937 from baude/issue25911
Output headers for volume ls when empty
2025-04-22 10:28:39 +00:00
71504eedfb Output headers for volume ls when empty
To have consistency with other podman commands like `ps` and `images`,
`volume ls` should output its headers even when there are no volumes.

Fixes: https://github.com/containers/podman/issues/25911

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-04-21 17:07:57 -05:00
5494ac882a [CI DOCS] Touchup buildah-bud README.md
The README.md in test/buildah-bud had the old directory name for the
apply-podman-deltas file.  This change removes the `/` and adds a `-`
in that file name.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-04-21 17:05:07 -04:00
b849550997 Merge pull request #25910 from TomSweeneyRedHat/dev/tsweeney/v5.5_SIC_dance
Bump c/storage v1.58.0, c/image v5.35.0, c/common v0.63.0
2025-04-21 13:44:22 +00:00
84c481ca5b Merge pull request #25931 from containers/renovate/setuptools-79.x
chore(deps): update dependency setuptools to v79
2025-04-21 13:33:21 +00:00
49b6faea09 chore(deps): update dependency setuptools to v79
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-20 16:01:15 +00:00
66954d7e7e Merge pull request #25858 from Luap99/prefetch
test/system: add prefetch users to use cache image
2025-04-20 16:00:40 +00:00
4ba8cde41d Add HostName to quadlet pod
update docs for hostname

Signed-off-by: Inshal Khan <kziaul123@gmail.com>
2025-04-19 08:51:45 +05:30
cb41c3901b Merge pull request #25875 from TomSweeneyRedHat/dev/tsweeney/fixgov1
[CI:DOCS] Add link to MAINTAINERS.md file in GOVERNANCE.md
2025-04-18 20:49:30 +00:00
f9eac5deb0 Merge pull request #25908 from Honny1/fix-ulimits-compat-api-with-rootless
Fix: Compat API in rootless mode ignores ulimits
2025-04-18 20:46:46 +00:00
3803429abb Merge pull request #25918 from ricardobranco777/test_runc_namespaces
test: Fix expected output for runc on namespaces
2025-04-18 19:26:56 +00:00
7d6c4f9a47 Merge pull request #25914 from ygalblum/quadlet-add-systemd-deps
Quadlet - support additional systemd unit relationship keys
2025-04-17 22:37:44 +00:00
a7a7304c6f test: Fix expected output for runc on namespaces
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2025-04-17 23:15:57 +02:00
1514e5cbcc feat: update vfkit binary to v0.6.1 in macOS installer
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2025-04-17 22:01:31 +02:00
05e7eeaff4 fix(deps): update module github.com/docker/docker to v28.1.0+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-17 19:48:18 +00:00
6ac0a28564 Quadlet - support additional systemd unit relationship keys
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-04-17 14:51:24 -04:00
fdfed9979f Add ability to set layer media type for artifacts
in #25884, it was pointed out that the standard detection used to
determine the artifact's file type can be wrong.  in those cases, it
would be handy for the user to be able to override the media type of the
layer.  as such, added a new option called `--file-type`, which is
optional, and allows users to do just that.

`podman artifact add --file-type text/yaml
quay.io/artifact/config:latest ./config.yaml `

Fixes: #25884

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-04-17 10:36:21 -05:00
be937a4e20 Bump c/storage v1.58.0, c/image v5.35.0, c/common v0.63.0
Bump:
c/storage v1.58.0
c/image v5.35.0
c/common v0.63.0

In preparation for Podman v5.5.0

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-04-17 11:05:56 -04:00
3cbb718049 Fix compat API in rootless mode ignores ulimits
Fixes: https://github.com/containers/podman/issues/25881

Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-04-17 16:11:34 +02:00
51c4df1316 Merge pull request #25789 from jankaluza/23292
Replace podman pause image with rootfs.
2025-04-17 08:47:30 +00:00
224e791161 Replace podman pause image with rootfs.
This commit removes the code to build a local pause
image from the Containerfile. It is replaced with
code to find the catatonit binary and include it in
the Rootfs.

This removes the need to build a local pause container
image.

The same logic is also applied to createServiceContainer
which is originally also based on the pause image.

Fixes: #23292

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2025-04-17 08:36:27 +02:00
f22a0a9de0 Merge pull request #25883 from containers/renovate/golangci-golangci-lint-2.x
chore(deps): update dependency golangci/golangci-lint to v2.1.2
2025-04-17 00:40:02 +00:00
edcac9e9de Merge pull request #25901 from eulores/patch-1
Update podman-systemd.unit.5.md
2025-04-16 21:06:36 +00:00
17f3aed4fd Merge pull request #25899 from ygalblum/quadlet-unit-deps
Quadlet - translate dependencies on other quadlet units
2025-04-16 21:03:52 +00:00
fd5ac51c9a Merge pull request #25898 from Honny1/fix-nolintlint
CI: Fix directive `//nolint:revive` is unused for linter "revive" on ARM
2025-04-16 20:11:15 +00:00
1143162e69 Merge pull request #25887 from fice-t/no-new-priv
docs: Expand description of no-new-privileges
2025-04-16 20:08:41 +00:00
bc9110c69f Update podman-systemd.unit.5.md
Table header in Pod units section was referring to podman container... instead of podman pod...

Signed-off-by: Andreas <43118918+eulores@users.noreply.github.com>
2025-04-16 21:52:11 +02:00
e498c6526b Quadlet - translate dependencies on other quadlet units
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-04-16 15:29:42 -04:00
69c2e68836 Fix directive //nolint:revive is unused for linter "revive" on ARM
Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-04-16 16:17:28 +02:00
ae63e2c932 Merge pull request #25876 from kolyshkin/golangci-v2-fup1
ci: fix two issues, remove unused exceptions
2025-04-16 13:21:24 +00:00
8690b20732 .golangci.yml: rm legacy and common-false-positives
Those were originally added by golangci-lint migrate, but currently do
not result in any warnings being suppressed.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
543a7ea062 pkg/bindings/containers: rm unused break
Reported by staticcheck linter:

> pkg/bindings/containers/term_windows.go:51:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
5f997a70bd cmd/podman/pods/create: fix break statement
This code was [somewhat messy but] correct until commit 51fbf3da9e
started to use switch instead of if, and since that time break is
breaking from the inner "switch" (rather than on the outer "for" as
originally intended).

This also fixes the following staticcheck warnings:

> cmd/podman/pods/create.go:242:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^
> cmd/podman/pods/create.go:245:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
b615011b44 docs: Expand description of no-new-privileges
Fixes: #25853

Signed-off-by: Alexander Gramiak <agrambot@gmail.com>
2025-04-15 14:48:42 -06:00
2a9b1499db Merge pull request #25879 from jankaluza/cloexec
Fix the fd leaking to aardvark-dns.
2025-04-15 19:52:18 +00:00
7b30f19535 chore(deps): update dependency golangci/golangci-lint to v2.1.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-15 15:53:06 +00:00
d9914ff27d Fix the fd leaking to aardvark-dns.
The openDirectory function is missing the unix.O_CLOEXEC flag.
As a result, this file descriptor can leak into the aardvark-dns
process which can then block the umount of rootfs - in this case,
the umount fails with "Device or Resource busy" error message.

This commits adds the unix.O_CLOEXEC to unix.Open call, resulting
in this fd to be closed on aardvark-dns exec.

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2025-04-15 13:24:03 +02:00
857b536507 test/system: add prefetch users to use cache image
When using a custom --root it will not have the image present and as
such cause a pull. We can however use our own local cache if present to
avoid the pull if we give the right podman options via
_PODMAN_TEST_OPTS.

I saw the volume quota test fail during the pull in openQA thus I
noticed this issue.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-15 12:36:40 +02:00