22622 Commits

Author SHA1 Message Date
af8fe2b75e Merge pull request #22764 from giuseppe/give-more-time-to-healthcheck-status-change
libpod: wait another interval for healthcheck
2024-05-28 13:21:43 +00:00
7ec22abb1c Merge pull request #22792 from containers/renovate/github.com-burntsushi-toml-1.x
fix(deps): update module github.com/burntsushi/toml to v1.4.0
2024-05-27 13:30:26 +00:00
d02a876dbe Merge pull request #22815 from Luap99/golangci-lint
update golangci-lint to v1.59.0
2024-05-27 11:58:04 +00:00
f48cf3cb8d Merge pull request #22811 from pcguy85/patch-1
[CI:DOCS] kubernetes_support.md: Mark volumeMounts.subPath as supported
2024-05-27 11:19:31 +00:00
a74e8e8ba2 Merge pull request #22808 from containers/renovate/github.com-onsi-ginkgo-v2-2.x
fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
2024-05-27 11:16:48 +00:00
7f567a4e51 tests: disable tests affected by a race condition
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-05-27 13:02:26 +02:00
2b43f62233 update golangci-lint to v1.59.0
Remove deactivated linters from the config as they will be removed in
the future and thorw warnings, all of them were disabled already anyway
so this is no functional change.
Second, fix one new lint warning for fmt.Scanln() error checking.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-05-27 11:19:03 +02:00
6dcde80999 kubernetes_support.md: Mark volumeMounts.subPath as supported
It seems like podman kube play already supports the field since version 4.4.0 but the documentation was not yet updated.

Signed-off-by: thartd <49099022+pcguy85@users.noreply.github.com>
2024-05-26 16:54:44 +02:00
c5597cb12c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-25 16:46:22 +00:00
c24e0cbfe7 Merge pull request #22797 from TomSweeneyRedHat/dev/tsweeney/buildah-1.36.0
Bump Buildah to v1.36.0
2024-05-25 16:45:06 +00:00
f8cc1b4807 Bump Buildah to v1.36.0
Bump Buildah to v1.36.0.  This is the final dance step before
Podman v5.1

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-05-23 20:27:54 -04:00
661e9ee804 fix(deps): update module github.com/burntsushi/toml to v1.4.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-23 15:20:30 +00:00
e53b96cb25 Merge pull request #22683 from grisu48/podmansh_sh
Add configuration for podmansh
2024-05-23 12:45:05 +00:00
eee0dc256a Merge pull request #22727 from mheon/chown_all_the_time
Always chown volumes when mounting into a container
2024-05-23 12:34:07 +00:00
db3abd0d28 test/e2e: fix new error message
The new c/image version is returning a slightly new error message[1] so
make tests use the new one.

[1] https://github.com/containers/image/pull/2408

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-05-23 13:29:39 +02:00
23c830704d Add configuration for podmansh
Use the configuration parameters from the newly introduced
PodmanshConfig struct. This allows podmansh to be configured via
configuration files.

Signed-off-by: phoenix <felix.niederwanger@suse.com>
2024-05-23 11:29:37 +02:00
4fd425429b Update containers/common to latest main
Update the containers/common dependency to the latest main with the
needed changes in Podmansh.

Signed-off-by: phoenix <felix.niederwanger@suse.com>
2024-05-23 11:29:27 +02:00
36152eeabf Merge pull request #22057 from jbtrystram/quadlet-image-network
quadlet: Add a network requirement on .image and .containers units
2024-05-23 06:19:07 +00:00
046c0e5fc2 Only stop chowning volumes once they're not empty
When an empty volume is mounted into a container, Docker will
chown that volume appropriately for use in the container. Podman
does this as well, but there are differences in the details. In
Podman, a chown is presently a one-and-done deal; in Docker, it
will continue so long as the volume remains empty. Mount into a
dozen containers, but never add content, the chown occurs every
time. The chown is also linked to copy-up; it will always occur
when a copy-up occurred, despite the volume now not being empty.
This PR changes our logic to (mostly) match Docker's.

For some reason, the chowning also stops if the volume is chowned
to root at any point. This feels like a Docker bug, but as they
say, bug for bug compatible.

In retrospect, using bools for NeedsChown and NeedsCopyUp was a
mistake. Docker isn't actually tracking this stuff; they're just
doing a copy-up and permissions change unconditionally as long as
the volume is empty. They also have the two linked as one
operation, seemingly, despite happening at very different times
during container init. Replicating that in our stateful system is
nontrivial, hence the need for the new CopiedUp field. Basically,
we never want to chown a volume with contents in it, except if
that data is a result of a copy-up that resulted from mounting
into the current container. Tracking who did the copy-up is the
easiest way to do this.

Fixes #22571

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2024-05-22 17:47:01 -04:00
d094a9f18e podman: fix --sdnotify=healthy with --rm
Now WaitForExit returns the exit code as stored in the db instead of
returning an error when the container was removed.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-05-22 21:34:38 +02:00
e166f6bfe0 libpod: wait another interval for healthcheck
wait for another interval when the container transitioned to "stopped"
to give more time to the healthcheck status to change.

Closes: https://github.com/containers/podman/issues/22760

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2024-05-22 21:34:34 +02:00
fa05adba67 Merge pull request #22750 from containers/renovate/golangci-golangci-lint-1.x
[CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
2024-05-22 12:57:13 +00:00
4290f8115d Merge pull request #22775 from edsantiago/disable-minikube
CI: disable minikube task
2024-05-22 12:37:59 +00:00
60493c0780 Merge pull request #22761 from eriksjolund/update-network-performance-docs
[CI:DOCS] performance: update network docs
2024-05-22 12:35:14 +00:00
cc79d5e82e Merge pull request #22700 from Luap99/libpod-inspect-API-v4
remote API: restore v4 payload in container inspect
2024-05-22 12:32:29 +00:00
1a72a166c8 Merge pull request #22774 from ashley-cui/perms
[CI:DOCS] Fix windows action trigger
2024-05-22 12:29:44 +00:00
54cb3673ed Merge pull request #22776 from containers/renovate/github.com-onsi-ginkgo-v2-2.x
fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
2024-05-22 12:24:15 +00:00
ad1d3f8fc7 quadlet: Add a network requirement on .image units
If a container unit starts on boot with a dependency on `default.target`
the image unit may start too soon, before network is ready. This cause
the unit to fail to pull the image.
- Add a dependency on `network-online.target` to make sure image pulls
don't fail.
See https://github.com/containers/podman/issues/21873

- Document the hardcoded dependency on `network-online.target` for images unit
and explain how it can be overriden if necessary.

- tests/e2e/quadlet: Add `assert-last-key-regex`

Required to test the `After=` override in [Unit] section
See https://github.com/containers/podman/pull/22057#issuecomment-2008959993

- quadlet/unitfile: add a prepenUnitLine method

Requirements on networks should be inserted at the top of the
section so the user can override them.

Signed-off-by: jbtrystram <jbtrystram@redhat.com>
2024-05-22 13:46:42 +02:00
c9241c990f Merge pull request #22777 from dgibson/deprecated-addr
test, pasta: Ignore deprecated addresses in tests
2024-05-22 10:58:59 +00:00
d418391ce6 test, pasta: Ignore deprecated addresses in tests
The default_addr shell function in test/system/helpers.network is used to
get the host's default address, which is used in a number of pasta
networking tests.  However, in certain circumstances it can incorrectly
pick a deprecated address as the primary address.  Correct it to exclude
those.

Signed-off-by: David Gibson <david@gibson.dropbear.id.au>
2024-05-22 17:36:33 +10:00
18557659e4 [CI:DOCS] performance: update network docs
* Document that pasta is now the default network driver

* Document command: podman info -f '{{.Host.RootlessNetworkCmd}}'

* Add note about missing network isolation

Fixes: https://github.com/containers/podman/issues/22748

Co-authored-by: Stefano Brivio <sbrivio@redhat.com>
Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
2024-05-22 08:13:47 +02:00
08507f3ffe fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-22 02:14:25 +00:00
93ef340071 CI: disable minikube task
It's been flaking heavily since March. I don't see any new
development going on in minikube-land. If anyone decides
to care about minikube again, they can reenable this.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2024-05-21 13:56:18 -06:00
8f8dfb971f [CI:DOCS] Fix windows action trigger
Give the artifact action the permission to trigger the windows installer action

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-05-21 14:42:49 -04:00
3d48d9b6ea Merge pull request #22758 from slp/rosetta-libkrun-fix
Check AppleHypervisor before accessing it
2024-05-21 16:24:37 +00:00
c8dc5c79ba Merge pull request #22749 from JayKayy/22317-clean-transient-user
add podman-clean-transient.service service to rootless mode
2024-05-21 16:21:49 +00:00
33a4dcd431 Merge pull request #22770 from containers/renovate/setuptools-70.x
chore(deps): update dependency setuptools to v70
2024-05-21 15:02:07 +00:00
d85d5632ad Merge pull request #22698 from Luap99/CI-VM
cirrus: use faster VM's for integration tests
2024-05-21 14:12:41 +00:00
d0ed27118a Merge pull request #22594 from radar07/default-rootless-network-docs
[CI:DOCS] Update podman network docs
2024-05-21 13:55:56 +00:00
1766a1a24b chore(deps): update dependency setuptools to v70
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-21 11:48:22 +00:00
4f31335fa4 Merge pull request #22404 from testwill/close_file
fix: close resource file
2024-05-21 11:47:36 +00:00
22ca67a753 Merge pull request #22732 from lsm5/main-bump-520
bump main to 5.2.0-dev
2024-05-20 16:15:21 +00:00
3ab9e864f6 Check AppleHypervisor before accessing it
In GetDefaultDevices(), make sure MachineConfig has an AppleHypervisor
instance before attempting to access it. This fixes a SIGSEGV when
running with libkrun as machine provider.

Signed-off-by: Sergio Lopez <slp@redhat.com>
2024-05-20 16:17:59 +02:00
f7bd15d527 Merge pull request #22754 from containers/renovate/github.com-containernetworking-plugins-1.x
fix(deps): update module github.com/containernetworking/plugins to v1.5.0
2024-05-20 12:38:08 +00:00
8bb86586f8 Merge pull request #22740 from Luap99/rootlessnetns-hosts
fix incorrect host.containers.internal entry for rootless bridge mode
2024-05-20 12:35:22 +00:00
e590cced06 fix(deps): update module github.com/containernetworking/plugins to v1.5.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-20 08:51:58 +00:00
d9d0840a4d [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-05-19 19:56:20 +00:00
63df724a40 add podman-clean-transient.service service to rootless
Signed-off-by: jkwiatko <jkwiatkoski@protonmail.com>
2024-05-19 15:43:02 -04:00
34d2d20d46 Merge pull request #21670 from tnk4on/rosetta-support
applehv: Rosetta support
2024-05-17 20:39:40 +00:00
9a8c3433c1 [CI:DOCS] Update podman network docs
Update the podman network docs to specify that the default rootless
networking tool has been swapped from slirp4netns to pasta.

Signed-off-by: Pranav RK <pranavrk7@gmail.com>
2024-05-17 19:05:31 +05:30