26707 Commits

Author SHA1 Message Date
Miloslav Trmač
ec0f63c6e5 Merge pull request #28106 from Luap99/vendor
vendor: update go.podman.io/... and buildah to latest
2026-02-18 20:27:18 +01:00
Paul Holzinger
72a0a1179e test/buildah-bud: skip build-with-run-mount
That test uses process substitution for the Containerfile which fails
because podman tries to use /dev/fd as context directory.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-18 15:19:57 +01:00
Paul Holzinger
a3198235bf bindings: do not validate source policy on the client
The client and server version can mismatch in which case the client may
fail on something the newer server can understand or the other way
around. Given the server has to parse and validate that output no matter
what there does not seem to be a strong argument for doing this on the
client side again.

Also this means we do leak the sourcepolicy package into the remote
client.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-18 14:18:44 +01:00
Nalin Dahyabhai
474ff994b6 build: connect --source-policy-file, --mount for remote builds
Pass --mount settings and the contents of the --source-policy-file
argument to remote builds.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-18 14:11:12 +01:00
Paul Holzinger
8af2158a83 vendor: update go.podman.io/... and buildah to latest
Mainly so we get a commit after [1] which makes the renovate auto update
work again. And also buildah to get a fix for a flake [2].

[1] https://github.com/containers/container-libs/pull/635
[2] https://github.com/containers/buildah/pull/6688

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-18 14:07:29 +01:00
Jan Rodák
38e1aa7ba0 Merge pull request #28085 from JCBird1012/main
compat/api: honor VolumeOptions.Subpath for HostConfig.Mounts
2026-02-18 10:48:54 +01:00
Jan Rodák
c581a93da5 Merge pull request #28095 from MayorFaj/fix/28031-publish-option
fix: add validation for --publish flag in container restore
2026-02-18 10:19:06 +01:00
Matt Heon
7e78e842a0 Merge pull request #28076 from amyssnippet/fix-final-v3
inspect: preserve secret target name in env masking
2026-02-17 12:09:32 -05:00
Paul Holzinger
617282ca7c Merge pull request #28102 from timcoding1988/using-aws-oidc-token
Using aws OIDC token
2026-02-17 12:50:54 +01:00
Paul Holzinger
f4aa01967e Merge pull request #28099 from Honny1/quadlets-restart-pod
Respect user-specified `Restart=` policy in pod units
2026-02-17 12:49:20 +01:00
Lokesh Mandvekar
3c38228a11 Merge pull request #28096 from m-horky/mhorky/quadlet-docs
docs(quadlet): Unify [Network] section on removal
2026-02-17 16:21:22 +05:30
Amol Yadav
ed8eec6bbf using Debugf and removed wierd DEBUG logs
Signed-off-by: Amol Yadav <amyssnipet@yahoo.com>
2026-02-17 13:58:22 +05:30
mhorky
9b611b5380 docs(quadlet): Unify [Network] section on removal
The original text was added in 518daef in 2023-08. Later, in 0d4a148
in 2025-04, a new option has been introduced without the text being
updated.

Signed-off-by: mhorky <mhorky@redhat.com>
2026-02-17 08:16:49 +01:00
Tim Zhou
64a3e31ab9 migrate to oidc
Signed-off-by: Tim Zhou <tizhou@redhat.com>
2026-02-16 21:57:51 -05:00
Jan Rodák
33e8abd637 Respect user-specified Restart= policy in pod units
Fixes: https://github.com/containers/podman/issues/28081

Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2026-02-16 22:12:18 +01:00
MayorFaj
1aefd06760 test: remove redundant test for restoring with --publish without --import
Signed-off-by: MayorFaj <mayorfaj@gmail.com>
2026-02-16 20:13:45 +00:00
Matt Heon
e6e821c6e2 Merge pull request #28059 from timcoding1988/cherry-pick-bot
update cherry pick with pr
2026-02-16 14:33:35 -05:00
Brent Baude
8e7b1343ca Merge pull request #28093 from containers/renovate/github.com-kevinburke-ssh_config-1.x
fix(deps): update module github.com/kevinburke/ssh_config to v1.5.0
2026-02-16 13:20:40 -06:00
Paul Holzinger
8c1cbdc7a0 Merge pull request #28086 from timcoding1988/pr-approval-doc-updates
docs: Update PR approval process to use GitHub's native review system
2026-02-16 18:25:36 +01:00
Ashley Cui
6cabddb091 Merge pull request #28097 from m-horky/mhorky/quadlet-ls
feat(cmd/podman/quadlet): Add 'ls' as 'list' alias
2026-02-16 12:08:22 -05:00
Matt Heon
fcb7b1fa31 Merge pull request #28083 from Luap99/config
storage.conf config file rework prep work and and design doc updates
2026-02-16 12:00:17 -05:00
Tim Zhou
751d6f7953 updating pr review and approval process
Signed-off-by: Tim Zhou <tizhou@redhat.com>
2026-02-16 11:32:04 -05:00
Paul Holzinger
20f01fb825 Merge pull request #28098 from m-horky/mhorky/quadlet-examples
fix(cmd/podman/quadlet): Indent all examples
2026-02-16 15:10:54 +01:00
mhorky
901ac1b416 feat(cmd/podman/quadlet): Add 'ls' as 'list' alias
All other commands support 'ls' for itemized listing.

Signed-off-by: mhorky <mhorky@redhat.com>
Assisted-By: Claude Code
2026-02-16 14:02:56 +01:00
mhorky
b12c51e5a4 fix(cmd/podman/quadlet): Indent all examples
Since these examples are multiline, we need to manually add padding to
the start of the line, otherwise the lines are not aligned.

Signed-off-by: mhorky <mhorky@redhat.com>
2026-02-16 13:56:34 +01:00
Paul Holzinger
60cfb66d8f podman system reset: do not print storage.conf warning
The orginal motivation was to give a hint to users to delete the file if
they did not create the storage.conf file since some early versions of
podman did auto generate that file[1].

However that was a really long time ago and with the config file rework
there can be many different storage.conf paths so this warning is no
longer useful so we should be able to remove this now.

[1] https://github.com/containers/podman/issues/7447

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-16 13:47:56 +01:00
Paul Holzinger
0778bdaffe podman info: remove storage.conf path
Given the new config file logic will read many files pritning one
specific one here has no meaning anymore, just delete it.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-16 13:47:56 +01:00
Paul Holzinger
a1afa58e27 system service: remove config reload functionallity
As I outlined in the design docs this is broken, there are several
data races here because we write to the config files that can be read by
other goroutines in parallel which violates the go memory model and
thus can lead to runtime panics and undefined behavior.
One could fix with a mutex but that would make the whole code base much
more ugly and there is still the risk that something would access this
field without the mutex held.

I am not sure we have any users using this, it never worked for the
storage side and since the service is a not a daemon any user could just
stop and start it again to re-read the files without having to stop
running containers.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-16 13:47:56 +01:00
Paul Holzinger
b45b826061 DESIGN DOC: update config-file-parsing
Add some more work items I should tackle as part of this.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-16 13:47:55 +01:00
MayorFaj
5a1a54424c fix: enforce --publish option usage with --import in podman restore
Signed-off-by: MayorFaj <mayorfaj@gmail.com>
2026-02-15 09:38:58 +00:00
renovate[bot]
de35ca847d fix(deps): update module github.com/kevinburke/ssh_config to v1.5.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-14 13:34:36 +00:00
Jonathan Caicedo
b584337bd6 compat/api: honor VolumeOptions.Subpath for HostConfig.Mounts
fixes: #27171
Signed-off-by: Jonathan Caicedo <jonathan@jcaicedo.com>
2026-02-13 12:47:54 -05:00
Amol Yadav
e9ba515fcf Add debug logging for EnvSecrets to diagnose restart mapping issue
Signed-off-by: Amol Yadav <amyssnipet@yahoo.com>
2026-02-13 22:44:52 +05:30
Amol Yadav
ac7d6c3fc4 inspect: preserve secret target name in env masking
Fixes #28075

Signed-off-by: Amol Yadav <amyssnipet@yahoo.com>
2026-02-13 22:43:14 +05:30
Paul Holzinger
09faf78441 Merge pull request #28090 from axel7083/docs/systemd/remove-false-claim
docs(podman-systemd.unit.5.md): remove false claim on Pods HostName key
2026-02-13 15:06:20 +01:00
axel7083
2369ed4b71 docs(podman-systemd.unit.5.md): remove false claim on Pods HostName key
Fixes https://github.com/containers/podman/issues/28089

Signed-off-by: axel7083 <42176370+axel7083@users.noreply.github.com>
2026-02-13 14:49:47 +01:00
Paul Holzinger
7b33409ae7 Merge pull request #28088 from kolyshkin/fix-build
libpod: fix build
2026-02-13 13:39:42 +01:00
Kir Kolyshkin
24a04de921 libpod: fix build
In the currently used go.podman.io/common/pkg/libartifact version
there is no store subpackage (yet). Fix the import statement and
usage accordingly.

Fixes: df0e3b6ec7 ("libpod: move artifact volume validation to creation phase"
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2026-02-12 17:30:07 -08:00
Ashley Cui
2743ac3430 Merge pull request #27982 from timcoding1988/chore/adding-assign-github-action
adding assign github action
2026-02-12 14:56:16 -05:00
Tim Zhou
243df78fb9 adding assign github action
Signed-off-by: Tim Zhou <tizhou@redhat.com>
2026-02-12 14:31:34 -05:00
Tim Zhou
c69072edb1 update cherry pick with pr
Signed-off-by: Tim Zhou <tizhou@redhat.com>
2026-02-12 14:30:46 -05:00
Paul Holzinger
89b646d8a3 Merge pull request #27946 from kairosci/fix/27747-artifact-volume-validation
libpod: move artifact volume validation to creation phase
2026-02-12 20:22:32 +01:00
Paul Holzinger
88bd85367d Merge pull request #28008 from shiv-tyagi/vendor-detection
Discover GPU vendor from CDI spec before injecting GPU for --gpus option
2026-02-12 18:54:34 +01:00
Alessio Attilio
df0e3b6ec7 libpod: validate artifact volume on create
Fixes: #27747
Signed-off-by: Alessio Attilio <attilio.alessio@protonmail.com>
2026-02-12 18:24:16 +01:00
Shiv Tyagi
d7a80dda1e Discover vendor from cdi spec before injecting CDI device for --gpu option
Signed-off-by: Shiv Tyagi <Shiv.Tyagi@amd.com>
2026-02-12 12:11:47 +00:00
Paul Holzinger
f29c649470 Merge pull request #28037 from kolyshkin/prealloc
ci: bump golangci-lint to v2.9.0, fix or suppress new warnings
2026-02-12 13:00:07 +01:00
Kir Kolyshkin
0ba42fe487 ci: bump golangci-lint to v2.9.0
Apparently, prealloc got much smarter in this version, so let's disable
it for _test.go files as we're not really interested in
micro-optimizations for the test code.

The rest of its warnings is being fixed by the earlier commits.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2026-02-11 11:41:11 -08:00
Kir Kolyshkin
94442ae44e pkg/machine/e2e: simplify runWslCommand
runWslCommand never returns err != nil because if there's an error, it
calls Fail (which panics, so the code after it is unreachable).

Remove error returning and checking.

Inspired by the following linter warning:

> pkg/machine/e2e/config_windows_test.go:59:56: runWslCommand - result 1 (error) is always nil (unparam)
> func runWslCommand(cmdArgs []string) (*machineSession, error) {
>                                                        ^

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2026-02-11 11:41:11 -08:00
Kir Kolyshkin
f9002cfd31 Fix GOOS=windows prealloc linter warnings
These ones:

> cmd/winpath/main.go:148:2: directive `//nolint:prealloc` is unused for linter "prealloc" (nolintlint)
> 	//nolint:prealloc
> 	^
> pkg/machine/hyperv/vsock/vsock.go:425:2: Consider preallocating allSocks (prealloc)
> 	allSocks := []*HVSockRegistryEntry{}
> 	^
> pkg/machine/wsl/machine.go:464:2: Consider preallocating newArgs with capacity 4 + len(arg) (prealloc)
> 	newArgs := []string{"-u", "root", "-d", dist}
> 	^
> pkg/machine/wsl/machine.go:471:2: Consider preallocating newArgs with capacity 4 + len(arg) (prealloc)
> 	newArgs := []string{"-u", "root", "-d", dist}
> 	^

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2026-02-11 11:41:11 -08:00
Kir Kolyshkin
3c3d32718f libpod: do not reuse names slice
Do not reuse names slice for the unrelated data. This fixes the
following prealoc warning:

> libpod/storage.go:109:2: Consider preallocating names with capacity 2 (prealloc)
> 	names := []string{containerName}
> 	^

This commit is part of series fixing issues reported by prealloc linter
from golangci-lint v2.8.0.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2026-02-11 11:41:11 -08:00