18537 Commits

Author SHA1 Message Date
ab3025568f Merge pull request #18052 from sstosh/resource-rootless
Do not display the resource limits warning message
2023-04-12 06:40:08 -04:00
8a9386d898 Merge pull request #18145 from sohankunkerkar/registry-migration
*: migrate image registry to registry.k8s.io
2023-04-12 06:37:28 -04:00
af74ac693a Merge pull request #18157 from containers/renovate/requests-mock-1.x
Update dependency requests-mock to ~=1.10.0
2023-04-12 06:34:27 -04:00
42b11643b9 Merge pull request #18151 from finalchild/autoremove
fix: Document removing anonymous volumes at create
2023-04-12 05:43:47 -04:00
176c329f95 Update dependency requests-mock to ~=1.10.0
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-04-12 09:19:18 +00:00
0a588e7f31 Merge pull request #18154 from containers/renovate/requests-2.x
Update dependency requests to ~=2.28.2
2023-04-12 05:18:31 -04:00
b75ee05d3b Update dependency requests to ~=2.28.2
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-04-12 07:14:52 +00:00
398223e506 Merge pull request #18146 from cevich/tweak_renovate
[CI:DOCS] Tweak renovate configuration
2023-04-12 03:13:54 -04:00
d38b22d507 fix: Document removing anonymous volumes at create
[NO NEW TESTS NEEDED]
Signed-off-by: Park Jaeon <me@finalchild.dev>
2023-04-12 09:44:50 +09:00
3a47342a6a Merge pull request #18002 from Luap99/netavark-plugin
add netavark plugin support
2023-04-11 13:37:43 -04:00
cf3374e2a8 Merge pull request #18140 from umohnani8/deployments
Read kube_generate_type from containers.conf
2023-04-11 12:57:01 -04:00
8c4838f6b4 Merge pull request #18083 from Luap99/pause-single-process
rootless: make sure we only use a single pause process
2023-04-11 11:05:39 -04:00
af7c258117 test/e2e: remove unnecessary SkipIfNetavark() calls
DHCP should be support with netavark now, the dns tests should just
work as well.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2023-04-11 17:04:43 +02:00
80652cacfc test/e2e: deduplicated network test
This test was added twice once for CNI and netavark, just write it once
there is no need to do this weird skip thing.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2023-04-11 17:04:42 +02:00
b526839a4e docs: update podman-network-create.1
- add information about netavark plugins
- add missing arguments to options the require an arg
- document that container dns is only supported with bridge

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2023-04-11 17:04:42 +02:00
ed99a979ce network create: add --interface-name
Allow users to customize the network_interface option is the network
config. For bridge this allows users to change the bridge name and for
maclvan it will be the same as `--opt parent=...`.
However the main reason for this option is to allow netavark plugins to
make use of it. I demoed the host-device plugin which makes use of this
as an example. While we could let users set them via --opt it is more
natural to just use the field which is designed for that purpose.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2023-04-11 17:04:33 +02:00
785c63c0f7 Renovate: Ensure release-note-none label is added
Signed-off-by: Chris Evich <cevich@redhat.com>
2023-04-11 11:02:26 -04:00
4bc4609d82 Renovate: Update ignore paths
It's desireable for renovate to mange `test/tools/go.mod` however, the
default ignorePaths is:

```
  "ignorePaths": [
    "**/node_modules/**",
    "**/bower_components/**",
    "**/vendor/**",
    "**/examples/**",
    "**/__tests__/**",
    "**/test/**",
    "**/tests/**",
    "**/__fixtures__/**"
  ]
```

Update this list to only include `vendor` and `docs`.

Signed-off-by: Chris Evich <cevich@redhat.com>
2023-04-11 10:55:57 -04:00
915bebac94 Merge pull request #18144 from vrothberg/fix-18132
test/system/252-quadlet.bats: fix flake
2023-04-11 10:50:34 -04:00
887c46fad7 Merge pull request #18124 from containers/renovate/major-ci-vm-image
chore(deps): update dependency containers/automation_images to v20230405
2023-04-11 10:39:29 -04:00
64ea5971a1 *: migrate image registry to registry.k8s.io
This change is a part of the bigger umbrella issue: https://github.com/kubernetes/k8s.io/issues/4780
Currently, we need this change to get in https://github.com/cri-o/cri-o/pull/6742,
which is failing in CI due to inconsistent vendoring.

Signed-off-by: Sohan Kunkerkar <sohank2602@gmail.com>
2023-04-11 10:30:43 -04:00
676486a856 test/system/252-quadlet.bats: fix flake
Wait for the expected logs to appear in the journal before using
`journalctl`.  #18132 is likely flaking because `journalctl` does
not yet see the container's logs.

Also force the test to use the `passthrough` log driver to make sure
`podman logs` continues being tests.

Fixes: #18132
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-04-11 15:31:40 +02:00
1bf5bdc689 Read kube_generate_type from containers.conf
Use the kube_generate_type from the containers.conf as
the default value for the --type flag for kube generate.
Override the default when userexplicitly sets the --type
flag.

Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
2023-04-11 09:15:05 -04:00
6f2a61a156 Merge pull request #18101 from mheon/release_notes_450_pt2
[CI:DOCS] Add remaining release notes for v4.5.0-RC2
2023-04-11 08:51:56 -04:00
11ac0d03e3 Debian setup: workaround for runc /dev/char/10:200 bug
Debian system tests failing due to unwanted warning:

   skipping device /dev/char/10:200 for systemd:
      stat /sys/dev/char/10:200: no such file or directory

Let's see if modprobing tun will eliminate the warning.
Add loud comments requesting removal once runc bug is fixed.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-04-11 06:34:43 -06:00
4f5f89cf88 Do not display the resource limits warning message
If resource limits is not set, do not display the following warning message:
`Resource limits are not supported and ignored on cgroups V1 rootless systems`

Ref: #17582

Signed-off-by: Toshiki Sonoda <sonoda.toshiki@fujitsu.com>
2023-04-11 19:30:59 +09:00
38c217a0bf pkg/rootless: use catatonit from /usr/libexec/podman
The path was missing a slash between the libexec path and the binary
name. This was never noticed because the code already falls back to a
builtt-in pause process.

Fixes: 71f96c2e6ff7 ("rootless: define LIBEXECPODMAN")

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2023-04-11 11:00:07 +02:00
bab95de9a2 rootless: make sure we only use a single pause process
Currently --tmpdir changes the location of the pause.pid file. this
causes issues because the c code in pkg/rootless does not know about
that. I tried to fix this[1] by fixing the c code to not use the
shortcut. While this fix worked it will result in many pause processes
leaking in the integrration tests.

Commit ab88632 added this behavior but following the disccusion it was
never the intention that we end up having more than one pause process.
The issues that was trying to fix was caused by somthing else AFAICT,
the main problem seems to be that the pause.pid file parent directory
may not be created when we try to create the pid file so it failed with
ENOENT. This patch fixes it by creating this directory always and revert
the change to no longer depend on the tmpdir value.

With this commit we now always use XDG_RUNTIME_DIR/libpod/tmp/pause.pid
for all podman processes. This allows the c shortcut to work reliably
and should therefore improve perfomance over my other approach.

A system test is added to ensure we see the right behavior and that
podman system migrate actually stops the pause process. Thanks to Ed
Santiago for the improved test to make it work for both `catatonit` and
`podman pause`.

This should fix the issues with namespace missmatches that we can see in
CI as flakes.

[1] https://github.com/containers/podman/pull/18057

Fixes #18057

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2023-04-11 10:57:46 +02:00
4857c65d3e Merge pull request #18035 from n1hility/flush-config
Update podman to use atomic container and machine config updates
2023-04-11 02:53:42 -04:00
820976a91e Merge pull request #18138 from cevich/use_gha_versions
[CI:DOCS] GHA: Use version instead of SHA for actions
2023-04-10 16:23:07 -04:00
3b2b1441ec Use atomic config writing strategy for podman machine config files
Windows: Flush machine config writes before renaming
Windows: Previously this code was changed to improve atomicity by changing
the persitence approach to a two-step process (write + rename).
However, the first-step write operation was not fully flushed,
leading to the possibility of incomplete writes.

[NO NEW TESTS NEEDED]

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2023-04-10 14:57:49 -05:00
67307603b4 Add remaining release notes for v4.5.0-RC2
Signed-off-by: Matt Heon <mheon@redhat.com>
2023-04-10 15:22:42 -04:00
d53871cf12 GHA: Use version instead of SHA for actions
It's nearly impossible for humans to tell semantic-version differences
by looking at a commit sha.  Since all the actions in question come from
github, there's little security/safety benefit to using SHAs.

Signed-off-by: Chris Evich <cevich@redhat.com>
2023-04-10 14:45:36 -04:00
25bc7d161e chore(deps): update dependency containers/automation_images to v20230405
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-04-10 17:35:57 +00:00
1f2775cbdc Merge pull request #18130 from flouthoc/bump-deps
vendor: bump `containers/(storage, buildah, image, common)`
2023-04-10 13:33:44 -04:00
0a89a22c71 Merge pull request #18105 from rhatdan/codespell
Fix up codespell errors
2023-04-10 13:33:04 -04:00
944accffaf build: pass env by reference
Buildah uses a different logic to pass environment variable to executor
now after: https://github.com/containers/buildah/pull/4702/files so
podman should same logic and pass env by reference.

Signed-off-by: Aditya R <arajan@redhat.com>
2023-04-10 20:31:23 +05:30
7edf73dfdf test: retrofit error message
Retrofit error message as per cf56eb1865

Signed-off-by: Aditya R <arajan@redhat.com>
2023-04-10 17:30:54 +05:30
b624ad7572 test/system: expect 12 char for short id
After https://github.com/containers/buildah/pull/4660 buildah
spits a 12 letter image short id instead of 13 so lets honor that.

Signed-off-by: Aditya R <arajan@redhat.com>
2023-04-10 17:30:34 +05:30
260bc3ec4c vendor: bump containers/(storage, common, buildah, image)
Bump containers/(storage, common, buildah and image)

Changes since 2023-01-01:
 - skip mount-cache-selinux-long-name test under remote, with
   a FIXME requesting that someone see if it can be made to work.

 - skip six tests that fail under rootless-remote

 - add new --build-arg-file option:
 - update man page

Squash of:
* cf56eb1865
* 561f082772

Signed-off-by: Ed Santiago <santiago@redhat.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Signed-off-by: Aditya R <arajan@redhat.com>
2023-04-10 17:30:14 +05:30
c04ccdbc55 Merge pull request #18121 from containers/renovate/actions-stale-8.x
[skip-ci] Update actions/stale action to v8
2023-04-09 07:20:31 -04:00
b3dd2dbf4c Merge pull request #18115 from containers/renovate/actions-setup-go-4.x
[skip-ci] Update actions/setup-go action to v4
2023-04-09 07:17:55 -04:00
8a6dc0a822 Merge pull request #18112 from containers/renovate/github-issue-labeler-2.x
[skip-ci] Update github/issue-labeler action to v2.6
2023-04-09 07:15:18 -04:00
0e35de0e42 Merge pull request #18122 from containers/renovate/actions-upload-artifact-3.x
[skip-ci] Update actions/upload-artifact action to v3
2023-04-09 07:07:34 -04:00
c5a0d86461 [skip-ci] Update actions/upload-artifact action to v3
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-04-09 10:09:56 +00:00
d3cf8ccf84 [skip-ci] Update actions/stale action to v8
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-04-09 07:32:10 +00:00
21fbd5c1ab [skip-ci] Update actions/setup-go action to v4
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-04-08 22:36:07 +00:00
adce98f08f Merge pull request #18104 from rhatdan/docs
[ci:docs] Capitalize all uid,gid and id words that are not options in docs
2023-04-08 07:41:56 -04:00
f3971e4124 [skip-ci] Update github/issue-labeler action to v2.6
Signed-off-by: Renovate Bot <bot@renovateapp.com>
2023-04-08 11:06:49 +00:00
a83f9d1e8f Merge pull request #18100 from containers/dependabot/go_modules/test/tools/golang.org/x/tools-0.8.0
build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
2023-04-08 03:56:38 -04:00