Commit Graph

26181 Commits

Author SHA1 Message Date
givensuman
e7b50c33df Add AppArmor key to quadlet .container files
Fixes: #27095
Signed-off-by: givensuman <givensuman@duck.com>
2025-11-05 18:15:52 -05:00
openshift-merge-bot[bot]
23e6a89d36 Merge pull request #27379 from Honny1/fix-copyuidguid
Fix copyUIDGID parameter inversion in Docker compat API
2025-11-05 08:04:30 +00:00
openshift-merge-bot[bot]
2b646e7cb7 Merge pull request #27438 from Mr-Bossman/dev/neurolag
Fixed Commands in `podman-for-windows` Guide
2025-11-04 22:26:57 +00:00
openshift-merge-bot[bot]
17beac160c Merge pull request #27405 from baude/setdefaultconnection
Add `update-connection` to machine start and init
2025-11-04 20:03:58 +00:00
Manuel Thalmann
58c2fcd2d4 Fix incorrect function call
Changes made in this commit will fix #16168

The current command in the docs expect a `docker.exe` file to exist in the current working directory.
As this is most likely a typo, changes made in this commit fix this issue.

Signed-off-by: Manuel Thalmann <m@nuth.ch>
2025-11-04 12:56:01 -05:00
Manuel Thalmann
2e84246ad5 Update docs for most recent Windows version
In more recent Windows 11 versions (not sure about Windows 10),
Windows now ships its own `curl.exe`,
so PowerShell's "curl"-alias no longer exists.

Changes made in this commit will replace the `curl` alias call with the actual `Invoke-WebRequest` function.

Signed-off-by: Manuel Thalmann <m@nuth.ch>
2025-11-04 12:55:51 -05:00
Brent Baude
623cb5f539 Bumping timeout for aarch64 machine
Bumping the timeout for aarch64 machine tests as I am getting a
consistent timeout where the tests are not completing in the given time.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-11-04 10:35:51 -06:00
Brent Baude
b4ec460ed4 Add update-connection to machine start and init
This allows users to set the associated machine's system connection to the system default when running `podman machine init --now` or `podman machine start`.  It also changes the default bbehavior of these commands in that the user will be prompted and asked if they would like to switch the system connection.  It also introduces a command line switch called `--update-connection`.  If the switch is unset, then the user will be prmpted.  If the command value is explicitly set to `false`, the user will not be prompted and the system connection will not be altered.  If the value is set to `true`, the system connection will be made the default and the user will not be prompted.

Fixes: https://issues.redhat.com/browse/RUN-3632

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-11-04 10:35:28 -06:00
openshift-merge-bot[bot]
53ef23df38 Merge pull request #27435 from timcoding1988/rotate_aws_keys
rotate aws meta_task keys
2025-11-04 15:45:42 +00:00
openshift-merge-bot[bot]
eb63a1f38d Merge pull request #27005 from zifeitong/newer
Fix podman build "newer" pull policy
2025-11-04 15:17:37 +00:00
Tim Zhou
f06f77468d rotate aws meta_task keys
Signed-off-by: Tim Zhou <tizhou@redhat.com>
2025-11-04 09:05:45 -05:00
openshift-merge-bot[bot]
5d0458672a Merge pull request #27430 from l0rd/fix-wsl-image-cache-mismatch
Fix cache misses when pulling WSL machine image
2025-11-04 13:54:52 +00:00
openshift-merge-bot[bot]
14dee39b08 Merge pull request #27140 from LecrisUT/tmt-integration
Add tmt integration plan
2025-11-04 13:07:55 +00:00
openshift-merge-bot[bot]
d8a0852140 Merge pull request #27428 from slp/krunkit-1.1.1
Bump bundled krunkit from 1.1.0 to 1.1.1
2025-11-04 13:02:29 +00:00
Cristian Le
01f1d1ecec Add tmt integration plan
See:
- https://github.com/teemtee/tmt/issues/4047
- https://github.com/teemtee/tmt/pull/4026

Signed-off-by: Cristian Le <git@lecris.dev>
2025-11-04 12:33:00 +01:00
openshift-merge-bot[bot]
4bd8730063 Merge pull request #27425 from shiavm006/fix-remote-detach-keys-empty-string
Fix remote client rejecting empty --detach-keys string
2025-11-04 11:17:12 +00:00
Mario Loriedo
7c51ad0ef8 Fix cache misses when pulling WSL machine image
Fixes a regression introduced by b2e6d53 that made always failing the
match of the WSL image from the registry with the image in the local
cache. The result was that the WSL machine image was always pulled from
quay.io even if an identical image was in the local cache.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-11-04 12:12:10 +01:00
Sergio Lopez
f2aceb829f Bump bundled krunkit from 1.1.0 to 1.1.1
Bump bundled krunkit to 1.1.1. This is a minor, expedited release
to fix a library linking problem.

Fixes: #27427
Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-11-04 10:09:09 +01:00
shiavm006
c0ae1a9bac Fix remote client rejecting empty --detach-keys string
The remote client (podman --remote) was incorrectly throwing an error
when --detach-keys="" was specified for attach, run, or start commands.
According to documentation and the v1.7.0 release notes, specifying an
empty string should disable detaching, not cause an error.

Fixes: #27414

Signed-off-by: shiavm006 <shivammittal42006@gmail.com>
2025-11-04 09:12:02 +05:30
openshift-merge-bot[bot]
020a59732a Merge pull request #27418 from cgwalters/drop-container-runtime
Makefile: Drop unused CONTAINER_RUNTIME
2025-11-03 19:53:19 +00:00
openshift-merge-bot[bot]
53d976bfee Merge pull request #27389 from containers/renovate/github.com-onsi-ginkgo-v2-2.x
fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.2
2025-11-03 19:22:43 +00:00
Colin Walters
ac888c73ef Makefile: Drop dead CONTAINER_RUNTIME
This variable is dead code as far as I can tell. I think it
got cargo culted from something similar in skopeo, where it *is*
used:
85598438ce/Makefile (L75)
etc.

(Instead it looks like there's a `PODMANCMD` here)

But I'm effectively using this PR as a way to suggest aligning
with what we're doing in bootc, where we have a core principle
that `Makefile` should *never* itself spawn containers (or VMs etc).
All the rules in Makefile are things that should work when e.g.
building RPMs or debs or the like.

Those tasks are things that are done via `Justfile`:
https://github.com/bootc-dev/bootc/blob/main/Justfile

So for example to align, we'd add a `Justfile` here and then
`make validatepr` would move to `just validatepr`.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-11-03 10:27:14 -05:00
openshift-merge-bot[bot]
a7da73cef4 Merge pull request #27422 from containers/renovate/github.com-shirou-gopsutil-v4-4.x
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.10
2025-11-03 14:41:03 +00:00
renovate[bot]
df7f14afb1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-03 14:38:59 +00:00
renovate[bot]
b309044006 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.10
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-01 03:08:38 +00:00
openshift-merge-bot[bot]
8aea109e42 Merge pull request #27333 from Honny1/search-tests-without-net
Eliminate network dependencies in `podman search` e2e tests with mock registry
2025-10-31 19:33:10 +00:00
openshift-merge-bot[bot]
6b731284f8 Merge pull request #27400 from lsm5/cncf-self-assessment
cncf: self-assessment doc
2025-10-31 13:18:07 +00:00
openshift-merge-bot[bot]
87b16eb6c9 Merge pull request #27406 from baude/prchecklist
Update gh pull request template
2025-10-30 18:43:48 +00:00
Lokesh Mandvekar
41ff61aba2 vendor neutral language, NIST database for known issues
Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-10-30 14:37:42 -04:00
openshift-merge-bot[bot]
69b397af49 Merge pull request #27410 from baude/fixdupmachinenames
Fix use of duplicate machine names
2025-10-30 14:32:16 +00:00
Brent Baude
46c428cd30 Update gh pull request template
Perhaps exposing some our critical pull requests requirements in a checklist might help users.  As of now, we do this as a "soft open".

Co-authored-by: Jan Rodák <hony.com@seznam.cz>
Co-authored-by: Ashley Cui <ashleycui16@gmail.com>
Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-10-30 08:58:28 -05:00
Brent Baude
553c4a16d5 Fix use of duplicate machine names
A condition was changed in the refgactor of init where duplicate names would be allowed but no machine was created.  Duplicate names are not permitted and should return an error.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-10-30 07:50:08 -05:00
openshift-merge-bot[bot]
937636b8d7 Merge pull request #27408 from ashley-cui/wix
Allow RC Windows Installer to be built
2025-10-30 09:38:41 +00:00
Ashley Cui
ec5e40ae42 Allow RC Windows Installer to be built
The windows installer doesn't like -rc's because it's not strictly semver, but this error can be suppressed.

Signed-off-by: Ashley Cui <acui@redhat.com>
2025-10-29 17:32:31 -04:00
openshift-merge-bot[bot]
6fe36e2aee Merge pull request #27376 from codynguyen-dev/docs-mount-section
docs: expand --mount section with detailed type descriptions (#25888)
2025-10-29 20:28:48 +00:00
openshift-merge-bot[bot]
0b17d3ff55 Merge pull request #27401 from mheon/wsl_not_enforcing
Allow failures on WSL machine tests
2025-10-29 19:55:44 +00:00
Lokesh Mandvekar
57c7a026ea cncf: self-assessment doc
This is being added here only for team review. This doc will live in
https://github.com/cncf/tag-security/ and *probably* be removed from
here.

Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-10-29 14:27:04 -04:00
Matt Heon
eccffefe64 Allow failures on WSL machine tests
The WSL tests for `podman machine` are flaking with unreasonable
frequency right now. Last Friday, I needed to re-run a job 8
times to get it to pass and complete the release of 5.7 RC1. This
is simply not sustainable. Mark the tests allowed-failure until
this can be resolved.

Signed-off-by: Matt Heon <mheon@redhat.com>
2025-10-29 14:09:41 -04:00
openshift-merge-bot[bot]
1b2773ae58 Merge pull request #27391 from nimdrak/27378
Missing network type in events document
2025-10-29 15:28:40 +00:00
openshift-merge-bot[bot]
4f262edfa2 Merge pull request #27386 from baude/initprovider
Machine init --provider
2025-10-29 14:29:55 +00:00
Brent Baude
5e1c2f8d7d Machine init --provider
Add the ability for users to override the default provider when creating mahcines.  The new flag is `--provider` and allows you to specifiy a valid vmtype for the platform.  This PR also removes the previous list test where we tested listing all providers.  I added a PR for testing --provider which includes a standard `machine ls` which defaults now to showing all providers.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-10-29 07:59:34 -05:00
openshift-merge-bot[bot]
386c8f3fe9 Merge pull request #27393 from slp/krunkit-1.1.0
Bump bundled krunkit from 0.2.2 to 1.1.0
2025-10-28 19:50:43 +00:00
openshift-merge-bot[bot]
01b669346e Merge pull request #27387 from mheon/remove_boltdb
Remove BoltDB state support
2025-10-28 17:41:05 +00:00
Sergio Lopez
103788be2c Bump bundled krunkit from 0.2.2 to 1.1.0
Bump bundled krunkit to 1.1.0. For podman, this release means
better I/O performance due to this libkrun version defaulting to
a more relaxed disk image sync on macOS, and raising the vCPU
limit to the maximum allowed by Hypervisor.framework.

Fixes: #27216
Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-10-28 18:14:53 +01:00
Matt Heon
f5bc2abe4c Remove BoltDB state support
This also includes a number of significant changes to the SQLite
state made possible by removal of the legacy DB.

1. Enable database unit tests for SQLite state, with numerous
   tweaks to get tests passing. Most notable changes are to
   container removal - where we previously didn't return an error
   if there was no container to remove - and RemovePodContainers,
   which I don't think ever worked properly from my reading of
   the failures.
2. Removal of AddContainerToPod/RemoveContainerToPod. On SQLite,
   these functions are identical to AddContainer/RemoveContainer
   and there is no reason to retain duplicates.
3. Removal of SafeRewriteContainerConfig - it's identical to
   RewriteContainerConfig in SQLite, no reason to have duplicate
   entrypoints.

As an exciting side-note, this removes Podman's requirement that
containers and pods cannot share a name, which was a BoltDB
restriction only.

Signed-off-by: Matt Heon <matthew.heon@pm.me>
2025-10-28 12:09:04 -04:00
openshift-merge-bot[bot]
500d1316fa Merge pull request #27385 from KonishchevDmitry/bind-mounts-with-spaces
Escape RequiresMountsFor value to properly handle bind mounts with spaces in path
2025-10-28 13:22:03 +00:00
openshift-merge-bot[bot]
5b52ee475c Merge pull request #27388 from baude/systemdescape
Escape periods in path
2025-10-28 11:22:53 +00:00
ByoungUk Lee
c872894615 Fixes #27378 Missing network type in events document
Signed-off-by: ByoungUk Lee <nimdrak@gmail.com>
2025-10-28 04:17:42 +00:00
openshift-merge-bot[bot]
2e738b9b87 Merge pull request #27341 from timcoding1988/rotate_aws_key
rotate aws key
2025-10-28 02:19:12 +00:00
openshift-merge-bot[bot]
bb94d57bbf Merge pull request #27371 from lordwelch/patch-1
Fix tmpfs U/chown option documentation
2025-10-28 00:12:14 +00:00