Commit Graph
341 Commits
Author SHA1 Message Date
Paul Holzinger 66c6da6e84 re-enable logformatter and post failure summary
Adapt the logformatter script to run again to produce nicely formatted
html logs. Because github cannot upload and show raw html files we can
only add it to the log archive which must be downloaded and viewed
locally.

To improve the online experience however github does have the
GITHUB_STEP_SUMMARY logic which allows us to produce markdown which will
be shown on the summary page for a given test run.

The problem is even though github markdown supports some html is does
not support CSS and out custom style of the logformatter, in addition
the output size is limited so I wrote another script parsing the html
output again and turning it into plain test for only the failed tests
and then show this as plain text inside codeblocks in the markdown.

With this we have a short failure summary which should display all
failures at once in the run page so maintainers can see if the failed
log was just some flake or an actual problem with the PR.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-29 14:49:23 +02:00
Tushar Verma 8a51676987 .github: remove the leftover cirrus cron scripts
The two workflows that called these scripts are both gone. The rerun one
went in 130bb2161 and check_cirrus_cron.yml went in 3743b9f8, the same
commit that deleted .cirrus.yml. The scripts themselves were left behind.

Nothing references them any more, and there is no action.yml here so they
were never usable as a composite action from another repo either. They
talk to the Cirrus GraphQL API with SECRET_CIRRUS_API_KEY, which we no
longer have anything running against.

Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>
2026-07-28 18:54:37 +05:30
renovate[bot] 59445bb218 Update actions/stale action to v11
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-28 04:09:16 +00:00
Paul Holzinger e41656077e ci: update machine linux timeout to 60m
It seems CNCF downgraded the runner performance and thus the task can no
longer finish in under 40 minutes. Bump it to 60m and hope this is
enough.

We cannot use a bigger runner (more cores) as the tests are largely
single threaded by design.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-27 20:27:23 +02:00
renovate[bot] 82c1ca98e0 Update zizmorcore/zizmor-action action to v0.6.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-23 22:14:01 +00:00
Paul Holzinger f9cd40e5af ci: update VM image to 2026-07-22
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-22 12:39:20 +02:00
Miloslav Trmač a4f3db7fbb Merge pull request #29235 from Luap99/lock-reuse
.github/workflows/issue_pr_lock.yml: run for the full org
2026-07-21 16:16:11 +02:00
renovate[bot] 923a3950ee Update actions/labeler action to v7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-21 09:35:32 +00:00
Paul Holzinger 589b0b2142 Merge pull request #29225 from podman-container-tools/renovate/actions-checkout-7.x
Update actions/checkout action to v7.0.1
2026-07-21 11:34:42 +02:00
Paul Holzinger 357519e364 .github/workflows/issue_pr_lock.yml: run for the full org
This workflow is used and called by buildah and skopeo, however due this
new if it will just get skipped there as the context on a action reuse
will still be set to the proper repo which calls the action.

The point of this new if from commit 32f987fc8c
("ci: restrict specific workflows to the upstream repository")
was to avoid running our actions on forks where they will fail due to
missing secrets, etc...

So by limiting the scope to our org here we can reuse it from buildah
and skopeo and still prevent it running on forks from users.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-21 11:18:51 +02:00
renovate[bot] cb27f01d48 Update actions/checkout action to v7.0.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-20 16:39:57 +00:00
Paul Holzinger d6b9c0b6ad .github/workflows: do not run cron jobs at midnight
As documented on github running jobs at the top of the hour and I guess
especially at midnight has the chance to get dropped as to many jobs are
started around that time for the github workers to handle.

I observed that happening today:
"No server is currently available to service your request."
https://github.com/podman-container-tools/podman/actions/runs/29709422226

So to fix that just move our cron time to some under "random" time
during the night.

https://docs.github.com/en/actions/reference/workflows-and-actions/events-that-trigger-workflows#schedule

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-20 14:20:08 +02:00
Paul Holzinger 5ae652ab9e ci.yml: add timeout-minutes to all jobs
Some jobs had no timeout set, add reasonable timeouts for the jobs. This
is needed because the github default it a timeout of 6 hours which is
just not sane and in case a job ever hangs will waste a lot of
resources.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-17 18:05:29 +02:00
Paul Holzinger c7444c9d5a Merge pull request #29115 from l0rd/wsl-host-containers-internal-test
Add a machine e2e test to test connection to `host.containers.internal`
2026-07-17 11:52:20 +02:00
Ashley Cui 10dfe12107 Merge pull request #29197 from Luap99/remove-cert-generator
remove first_contrib_cert_generator.yml
2026-07-16 15:35:08 -04:00
Mario Loriedo 452c40a1b6 Add machine e2e test for host.containers.internal
Add one more test to the basic podman commands e2e tests:
- starts an HTTP server on the host
- verify HTTP requests from a container, using
`host.containers.internal` or `host.docker.internal`, are routed
successfully to the server running on the host

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>

test

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2026-07-16 14:33:18 +02:00
Jan Rodák 213a53cd47 Merge pull request #29204 from podman-container-tools/renovate/actions-setup-go-7.x
Update actions/setup-go action to v7
2026-07-16 13:31:45 +02:00
renovate[bot] 6b1b1080a1 Update actions/setup-go action to v7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-16 04:55:56 +00:00
renovate[bot] ab2a41ceff Update zizmorcore/zizmor-action action to v0.6.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-15 17:05:43 +00:00
Paul Holzinger b64140e0ef update dessant/lock-threads to v6.0.2
We need this so the action accepts the new github token format.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-15 12:35:24 +02:00
Paul Holzinger 14db369cdd issue_pr_lock.yml: use client id
Using the app id is deprecated, also so far since the repo move this
workflow failed all the time as the github app was not in the new org.
I created a new app for this and set the right vars.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-15 12:32:07 +02:00
Paul Holzinger 499503b18c remove first_contrib_cert_generator.yml
This action never worked AFAICT, no cert was ever created[1] (outside
of the test certs on another repo) and the job gets always skipped.

Since nobody seems to be bothered by this it should be removed IMO.
Given the action commit access to the other repo was never a good idea
and with the CNCF move now we should not depend on it any more.

Like it is right now it just wastes action resources. And renovate will
update the action in the workflow so we get extra PRs for no benefit to
review and validate.

[1] https://github.com/containers/automation/tree/main/certificates

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-15 11:53:59 +02:00
renovate[bot] 3af2540435 Update actions/setup-node action to v7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-14 08:09:20 +00:00
renovate[bot] a22b7e6336 Update actions/stale action to v10.4.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-13 16:08:47 +00:00
renovate[bot] ff0dda12a6 Update actions/labeler action to v6.2.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-13 15:43:40 +00:00
Paul Holzinger e8b835dad1 renovate: point config to new repo
We have a new config in the automation repo under
podman-container-tools, see
https://github.com/podman-container-tools/automation/pull/29

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-07 19:25:08 +02:00
Paul Holzinger 8e74c1efd8 ci: make the automation release renovate managed
Put the variable in the workflow file like the renovate config expects,
see https://github.com/podman-container-tools/automation/pull/29

To ensure the local runs keep working we need a fall back to parse the
file manually.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-07-07 14:33:20 +02:00
renovate[bot] 258a2cb12c Update dorny/paths-filter action to v4.0.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-07-02 23:10:08 +00:00
Paul Holzinger d9a2250d3c Merge pull request #29086 from Luap99/machine-upgrade
fix podman machine os upgrade distro check
2026-07-02 17:18:00 +02:00
Paul Holzinger 5cdc6f80c0 label machine issues automatically
In podman info we print the os variant so use that to label the issue
with 'machine'.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-06-30 15:12:08 +02:00
renovate[bot] 5ab64e70a0 Update golangci/golangci-lint-action action to v9.3.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-29 16:15:06 +00:00
Paul Holzinger a91d487db7 Merge pull request #29063 from l0rd/fix-machine-init-when-wsl-isnt-installed
Fix machine init when WSL isn't installed
2026-06-29 12:15:43 +02:00
Paul Holzinger f1c4cf4d9b Merge pull request #29062 from ashley-cui/nightly-names
Upload artifacts with build suffix
2026-06-29 11:52:34 +02:00
Mario Loriedo 80203302f9 Fix lookup of WSL VMs with matching name
When WSL wasn't installed, the lookup erroneously reported that
a VM with the same name existed. Instead, in this case, the lookup
should return zero matching VMs.

Fixes https://github.com/podman-container-tools/podman/issues/29053

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2026-06-27 10:52:26 +02:00
Ashley Cui f69796b6bc Upload artifacts with build suffix
The nightly release validation builds both on main and the latest release branch,
we should upload the artifacts with a suffix to differentiate the two

Signed-off-by: Ashley Cui <acui@redhat.com>
2026-06-26 16:00:02 -04:00
renovate[bot] 61547d09b0 Update dawidd6/action-send-mail action to v18
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-26 02:49:08 +00:00
Ashley Cui e696a79b58 Fix release email
gh auth login fails if we set GITHUB_TOKEN

Signed-off-by: Ashley Cui <acui@redhat.com>
2026-06-25 09:13:09 -04:00
renovate[bot] 99174a9750 Update actions/setup-go action to v6.5.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-24 04:58:04 +00:00
Paul Holzinger 33e8a80ded drop unused swagger upload workflow
See the prior commit, we now build the swagger yaml as part of the
official readthedocs process so we do not need to host it elsewhere.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-06-23 19:11:11 +02:00
renovate[bot] 13bbb7d2ad Update r-lib/actions action to v2.12.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-23 07:49:22 +00:00
renovate[bot] 19edca8693 Update zizmorcore/zizmor-action action to v0.5.7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-22 02:32:30 +00:00
renovate[bot] b05ed5abfe Update actions/checkout action to v7
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-18 14:09:57 +00:00
Byounguk Lee 32f987fc8c ci: restrict specific workflows to the upstream repository
Many GitHub Actions workflows currently trigger on user forks, leading to
unnecessary CI resource consumption, unwanted bot behavior, and inevitable
failures. This commit restricts these specific workflows to only run on the
primary `containers/podman` repository.

The restricted workflows fall into two main categories:
1. Require Custom Upstream Secrets: Workflows like `release`, `mac-pkg`,
   `cherry-pick`, and `dev-bump` rely on secrets (e.g., Apple/Azure certs,
   PODMANBOT_TOKEN, ACTION_MAIL_*) that are unavailable in forks.
2. Manage Upstream Tracker State: Workflows like `assign`, `stale`, and
   `labeler` are intended strictly for managing the primary project's
   issues and PRs. Running them on personal forks creates unwanted noise.

Additionally, refactored several complex `if` conditions using YAML
multi-line strings (`|`) to maintain and improve readability.

Signed-off-by: Byounguk Lee <nimdrak@gmail.com>
2026-06-18 11:32:53 +00:00
Paul Holzinger c8ce2c6089 validate: disable golangci-lint cache
Something with the cache is not working right and results in
inconsistent lint result.

Even on PRs where there are no source code changes we observe random
failures. I have seen at least 4 different instances since we the new CI
setup. It is not reasonable to spot fix each new warning (mostly just
adding new nolint comments) each time as it affects all PRs at once.
It will also be very confusing for new contributors.

Fixes: #28893

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-06-16 18:58:46 +02:00
Matt Heon 735d0b0093 Merge pull request #28903 from Luap99/fix-chrootarchive-remote
fix podman-remote save -f oci-dir/docker-dir
2026-06-11 09:58:56 -04:00
Mario Loriedo d1f0833c5f Merge pull request #28895 from ashley-cui/nightly
Release CI: Migrate to re-usable build action
2026-06-11 11:48:25 +02:00
Paul Holzinger fd07b9c6ec fix podman-remote save -f oci-dir/docker-dir
With podman-remote we do not enter a our user namespace like we do with
local podman so we keep running with the real user id.

So if we then try to use chrootarchive as normal user it fails with:
creating mount namespace before pivot: operation not permitted

So simply revert back to the normal archive code.

Now the more interesting thing is we do have a test
"podman save to directory with oci format" but it never runs
rootless+remote in our CI system with our current matrix as we wanted to
reduce jobs.
So rethink the matrix and add one such job as this shows it is needed.

Fixes: 25aee24cbd ("use chrootarchive over plain archive package")

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-06-10 18:47:02 +02:00
Jan Rodák 86efefb654 Merge pull request #28894 from Luap99/pr-labels
.github/labeler: add CI label automatically
2026-06-10 09:53:32 +02:00
Ashley Cui 2f4e890067 Release CI: Migrate to re-usable build action
Migrate release to use release-build-artifacts action. This re-usable build action is tested nightly, so hopefully this will make our release automation more stable, as we may catch issues in our nightly runs. Followup to https://github.com/podman-container-tools/podman/pull/28176

Signed-off-by: Ashley Cui <acui@redhat.com>
2026-06-09 14:25:10 -04:00
renovate[bot] 612a4acaab Update actions/stale action to v10.3.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-06-09 18:20:33 +00:00