Commit Graph

1330 Commits

Author SHA1 Message Date
Lokesh Mandvekar
b8f24004d0 Packit: Disable testing-farm dnf repo
This will fetch latest dependencies from podman-next while using podman
from the packit copr builds.

TMT_TREE envvar is ok to use in this case as it will only be used on
upstream packit tests.

Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-11-17 08:26:39 -05:00
Lokesh Mandvekar
fffb1b3ba8 Packit: move scripts to contrib/packit-tmt
Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-11-12 15:13:15 -05:00
Lokesh Mandvekar
07e4b253c6 Packit: Bump podman-next repo priority for cockpit tests
TMT_TREE envvar is ok to use in this case as it will only be used on
upstream packit tests.

Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-11-12 14:27:15 -05:00
Sergio Lopez
f2aceb829f Bump bundled krunkit from 1.1.0 to 1.1.1
Bump bundled krunkit to 1.1.1. This is a minor, expedited release
to fix a library linking problem.

Fixes: #27427
Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-11-04 10:09:09 +01:00
Ashley Cui
ec5e40ae42 Allow RC Windows Installer to be built
The windows installer doesn't like -rc's because it's not strictly semver, but this error can be suppressed.

Signed-off-by: Ashley Cui <acui@redhat.com>
2025-10-29 17:32:31 -04:00
openshift-merge-bot[bot]
386c8f3fe9 Merge pull request #27393 from slp/krunkit-1.1.0
Bump bundled krunkit from 0.2.2 to 1.1.0
2025-10-28 19:50:43 +00:00
Sergio Lopez
103788be2c Bump bundled krunkit from 0.2.2 to 1.1.0
Bump bundled krunkit to 1.1.0. For podman, this release means
better I/O performance due to this libkrun version defaulting to
a more relaxed disk image sync on macOS, and raising the vCPU
limit to the maximum allowed by Hypervisor.framework.

Fixes: #27216
Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-10-28 18:14:53 +01:00
Matt Heon
f5bc2abe4c Remove BoltDB state support
This also includes a number of significant changes to the SQLite
state made possible by removal of the legacy DB.

1. Enable database unit tests for SQLite state, with numerous
   tweaks to get tests passing. Most notable changes are to
   container removal - where we previously didn't return an error
   if there was no container to remove - and RemovePodContainers,
   which I don't think ever worked properly from my reading of
   the failures.
2. Removal of AddContainerToPod/RemoveContainerToPod. On SQLite,
   these functions are identical to AddContainer/RemoveContainer
   and there is no reason to retain duplicates.
3. Removal of SafeRewriteContainerConfig - it's identical to
   RewriteContainerConfig in SQLite, no reason to have duplicate
   entrypoints.

As an exciting side-note, this removes Podman's requirement that
containers and pods cannot share a name, which was a BoltDB
restriction only.

Signed-off-by: Matt Heon <matthew.heon@pm.me>
2025-10-28 12:09:04 -04:00
Mario Loriedo
dad3111a3d Fix Windows Installer GH release
Function `SignItem` used the helper `CheckCommand` that got removed as
part of #27284. As a result the GH release job failed
https://github.com/containers/podman/actions/runs/18792520254/job/53626352685

This commit address that.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-10-27 14:21:32 +01:00
openshift-merge-bot[bot]
2883e95ae5 Merge pull request #27294 from mheon/warn_on_boltdb
Warn on BoltDB usage
2025-10-23 11:27:27 +00:00
Matt Heon
9ea18b78fa Warn on boltdb use
We started logging this in 5.6. In 5.7, we up to a warning. The
upcoming 5.8 will up the warnings further to errors.

Required as we're removing BoltDB support in 6.0 next Spring.

Signed-off-by: Matt Heon <matthew.heon@pm.me>
2025-10-22 09:24:43 -04:00
openshift-merge-bot[bot]
b3ec5cf29e Merge pull request #26618 from mtrmac/sequoia
Add --sign-by-sq-fingerprint
2025-10-21 11:06:38 +00:00
Mario Loriedo
9dbc33bb25 Add a new Windows installer supporting user scope
Fixes #22994 and #25968

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-10-15 18:50:03 +02:00
openshift-merge-bot[bot]
a118fdf4e2 Merge pull request #27043 from baude/podman6hld
Add Podman 6 HLD
2025-09-25 20:48:44 +00:00
Brent Baude
32c962a177 Add Podman 6 HLD
Adding a design document for Podman 6.  it is a high level design that tries to encompasses proposed changes to Podman and its runtime environment.  It should highlight major changes and features; but you will also find nitty detailed changes that have been idenitified.  It is quite possible things in this document will change but it allows for open, transparent communication.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-09-25 15:16:49 -05:00
Matt Heon
9bca0d01d2 Add a design document for Conmon v3
Signed-off-by: Matt Heon <mheon@redhat.com>
2025-09-25 15:54:23 -04:00
Miloslav Trmač
2f005b67f4 Exercise containers_image_sequoia in CI
This build tag replaces the backend for _verification_
of GPG signatures, to use Sequoia-PGP instead of GNUPG.

Do Rawhide builds with Sequoia; the podman-sequoia package exists
in F43 and later, so we can't do it in earlier versions.

This way we cover both variants (+ containers_image_openpgp
in the podman-remote client, at least that it builds).

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-09-11 20:31:36 +02:00
Matt Heon
5b10b51788 Add a directory for design documents
Add a new directory, which I'm currently dubbing "Features", in
which will live design documents - descriptions of Podman
features that will be implemented or are being implemented.
Add a README and template to this directory to make the purpose
clear and enable easy addition of new design documents.

Signed-off-by: Matt Heon <matthew.heon@pm.me>
2025-09-09 18:12:38 -04:00
Matt Heon
4b66e5a27b Add R! to systemd-tmpfiles script for all /tmp dirs
We already used `x` in tmpfiles, to ensure systemd did not remove
our directories or clean their contents (we really need them to
be left unmodified). However, systemd-tmpfiles lets us use more
than one directive per line, which means we can safely add an R!
(recursive remove on reboot) to these lines to ensure that, if
/tmp is not a tmpfs, systemd-tmpfiles will still remove our
temporary files, ensuring reboots are still accurately detected.

Signed-off-by: Matt Heon <mheon@redhat.com>
2025-09-04 09:51:37 -04:00
openshift-merge-bot[bot]
74f5ed71b9 Merge pull request #26713 from Luap99/deps-script
contrib: add script and docs to analyze dependency usage
2025-08-28 19:32:29 +00:00
Paul Holzinger
d267f8a3dd ci: log wsl --version output
So we know what we are actually running on in tests.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-08-20 11:51:27 +02:00
Paul Holzinger
5f5519607b contrib: add script and docs to analyze dependency usage
As part of my debloat activity I wrote a small script that makes use of
goda[1] to check our imports and what we can likely trim to reduce the
binary size.

I also added a readme to document what I did basically. This should help
anyone doing this work in the future again.

[1] github.com/loov/goda

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-08-11 11:23:21 +02:00
Mario Loriedo
4410fcb394 cirrus: setup WSL logging
To debug some of the WSL issues we are seeing try to setup logging,
the script parts are taken from the offical logging script[1].

[1] https://raw.githubusercontent.com/microsoft/WSL/master/diagnostics/collect-wsl-logs.ps1

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-07-04 14:28:58 +02:00
Sergio Lopez
b099a93580 Bump bundled krunkit from 0.2.1 to 0.2.2
Bump bundled krunkit to 0.2.2. This bundle also includes libkrun
1.14.0, allowing us to enable nested virt on M3 and M4 systems by
default.

Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-06-25 13:09:29 +02:00
Paul Holzinger
5d88999447 remove contrib/modules-load.d
We used this to load the iptables module, since f41 we use nftables by
default which does not need this at all so drop the module load file.

If some distros default still to the legacy iptables they can manually
add the moduled load file back.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-17 18:11:06 +02:00
Paul Holzinger
241f2d7928 remove contrib/snapcraft
AFAICT we never published a snap podman package and this here has never
been updated so remove it.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-17 18:04:16 +02:00
Paul Holzinger
4582c3413f remove contrib/script/size.sh
This script does not bring accurate results. For nice dependency
analysis I can recommend goda:

https://github.com/loov/goda

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-17 18:01:51 +02:00
Paul Holzinger
605b1f7386 remove contrib/remote/containers.conf
The config file is installed in the remote zip as an example but the
content in there is not being updated and no longer really the way to do
things. With podman 5.0 we have a proper system connection file and
people in general should just use the system connection commands.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-17 17:59:06 +02:00
Paul Holzinger
e9aad3d40d remove contrib/dependabot-dance
This script was used when dependabot could not deal with vendoring, we
long since moved to renovate which handles it fine with manual steps so
remove this script.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-17 17:55:35 +02:00
Paul Holzinger
14b1ee5837 remove contrib/dependencies.txt
This list is not up to date, a full list can be found in the
rpm/podman.spec file.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-17 17:54:52 +02:00
Paul Holzinger
febb667865 remove contrib/containers-common
It doesn't seem to be used anywhere and is not maintained. An up to date
specfile is found in the c/common repo.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-17 17:51:48 +02:00
Brent Baude
d4a8598ca4 make validate-in-container changes
changing the validate-in-container make target to use
quay.io/libpod/validatepr:latest.  this allows `make validate` to run to
completion doing linting, ed's perl checks, and pre-commit.]

The image is now based on F42 `awk` is not part of the base image, so I added `awk`.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-06-10 12:38:35 -05:00
Paul Holzinger
6d6ebad829 github: remove fcos next image workflow
We do our proper machine os image builds in podman-machine-os now and
with [1] we also publish a next tag for easy testing. As such this
action is no longer needed.

[1] https://github.com/containers/podman-machine-os/pull/128

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-05-19 18:37:38 +02:00
Sergio Lopez
6ae920de8b Bump bundled krunkit to 0.2.1
Bump the bundled krunkit version from 0.2.0 to 0.2.1.

Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-05-12 18:38:28 +02:00
Mario Loriedo
35e1c2033a Fix windows arm64 installer build
This is a followup of https://github.com/containers/podman/pull/26048

It fixes `process-release.ps1` that was always looking for the amd64 release
zip file, even if `$env:PODMAN_ARCH` was set to arm64. With this fix it looks
for the right zip file.

It fixes `winmake.ps1` that, when the `-arch` param was not passed, set `$env:PODMAN_ARCH`
to the empty string instead of the local `$env:GOARCH`.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-05-07 18:33:32 +02:00
Mario Loriedo
7fddbd4d4d Update winmake.ps1 to build arm64 artifacts
Winmake could only build amd64 artifacts (podman-remote, gvproxy,
win-sshproxy, podman.msi and podman-setup.exe).

This commit makes the necessary change to winmake so that it:
1) builds arm64 artifacts when executed on arm64
2) cross-compiles to arm64/amd64 with the  `-architecture` parameter

It depends on https://github.com/containers/podman/pull/26023 that
removes the need to build `check.c` code (that is not used anyway).

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-05-02 20:22:28 +02:00
openshift-merge-bot[bot]
804ad4e491 Merge pull request #26023 from l0rd/win-installer-remove-provider-check
Remove providers checks from the Windows Installer
2025-05-02 09:49:13 +00:00
Giuseppe Scrivano
80065f7224 ci: Load null_blk for I/O limit tests
Load the `null_blk` kernel module to have the `/dev/nullb0` device
available for the tests.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2025-04-30 16:21:38 +02:00
Mario Loriedo
9c5f7662d1 Remove providers checks from the Windows Installer
This PR removes the file `check.c` and the instructions
to build it. The file was still built but the resulting
dll was not used by the installer anymore (see
https://github.com/containers/podman/pull/25237).

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-04-30 14:21:00 +02:00
Arthur Sengileyev
ae9e85bfc5 Update "check.c" to be C23 compliant
Fixes compilation errors with GCC 15.

Signed-off-by: Arthur Sengileyev <arthur.sengileyev@gmail.com>
2025-04-29 11:10:45 +03:00
Florent Benoit
75aec675d2 chore: use another script to get the version of gvproxy
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2025-04-22 22:04:08 +02:00
Yevhen Vydolob
ce0617eac4 Use gvisor-tap-vsock version from go.mod file
Instead of hardcoding gvisor version in different build files, we get gvisor version from go.mod file.

Signed-off-by: Yevhen Vydolob <yvydolob@redhat.com>
2025-04-22 18:44:04 +02:00
Florent Benoit
1514e5cbcc feat: update vfkit binary to v0.6.1 in macOS installer
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2025-04-17 22:01:31 +02:00
Sergio Lopez
146f70d9fe Bump bundled krunkit to 0.2.0
Bump the bundled krunkit version from 0.1.4 to 0.2.0.

Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-04-08 10:57:04 +02:00
Kir Kolyshkin
9d4e820264 Use golangci-lint fmt for pkg/bindings
golangci-lint v2 introduced a new command, fmt, which runs configured
formatters (see formatters in .golangci.yml).

Use this for generated files. Drop separate goimports binary.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-03 10:41:14 -07:00
Kir Kolyshkin
60692ca350 Remove exclude_graphdriver_devicemapper build tag
As of commit d4c7ca39f ("update c/{buildah,common,image,storage} to
latest main") no dependencies use exclude_graphdriver_devicemapper tag.

This (hopefully) concludes the work of removing devicemapper graph
driver.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-03-30 00:30:03 -07:00
Paul Holzinger
9b9c60d814 CI: use z1d instance for windows machine testing
This one has two local NVMe's attached so we should be able to use fast
local storage to hopefully speed the test up. The NVMe are not mounted
by default so we have to format and mount them. I have choosen Z as
drive letter as I guess it seems most likely that it is free.
Then we need to set the TMPDIR envs to make the machine tests use the
new location.

This speeds up hyperV tests by 20mins and wsl by 9 mins.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-03-26 15:10:04 +01:00
openshift-merge-bot[bot]
e65687291a Merge pull request #25646 from baude/noarchset
Do not set arch for windows to amd64
2025-03-24 14:21:03 +00:00
Brent Baude
5e66d38c9d Do not set arch for windows to amd64
Setting the arch to amd64 breaks arm64 windows builds.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-03-20 15:24:52 -05:00
Mario Loriedo
af29bb5b6e Update CI to run Windows unit tests
Add a new target in winmake.ps1 to run unit tests and use
use it in a new cirrus task.

Fix machine_windows_test.go to make it work in CI machine.

Add the `!windows` tag on tests files that fail on Windows.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-03-16 13:40:16 +00:00