Commit Graph

26751 Commits

Author SHA1 Message Date
Miloslav Trmač
a37bf83dfc Also set DestinationCtx in a copy
It shouldn't actually affect anything, but it's easier
to set it than worry.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-02 23:17:13 +01:00
Miloslav Trmač
e04b77e600 Consolidate the call to bindings.NewConnectionWithOptions
... to centralize the conversion from entities.PodmanConfig
to bindings.Options, we will add more code there.

Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-02 23:17:13 +01:00
Miloslav Trmač
fd86c3c25f Use pullOptions.systemContext in getDestArtifact
Right now, this correctly handles pullOptions.credentials
which were ignored previously (admittedly that field is never set
by anything...); in the future, it will ensure the two c/image users
won't get out of sync again.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-02 23:17:12 +01:00
Miloslav Trmač
5946f7afcf Factor out pullOptions.systemContext from pull
We will add another user.

Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-02 23:17:12 +01:00
Miloslav Trmač
e807ae4350 Make ocipull.Pull and PullOptions private
There are no external users, so make that clearer.

Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-02 23:17:12 +01:00
Miloslav Trmač
2d4fb908a1 Pass all of Options to tcpClient
This will make it easier to add one more option,
and removes a risk of passing options in an incorrect order.

Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-02 23:17:12 +01:00
Miloslav Trmač
d561f13d7c Simplify setting up Runtime.imageContext
- Don't allocate it on-demand, it will always be created in the end.
- Embed the SystemContext directly, without using a pointer,
  to make it clear it always exists.

Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-02 23:16:49 +01:00
Miloslav Trmač
2ac337dbd8 Behavior change: Don't change TMPDIR in WithRegistriesConf
Previously, using WithRegistriesConf was setting
BigFilesTemporaryDir using buildah/internal/tmpdir, which (turns relative
$TMPDIR into absolute and) silently ignores invalid values in containers.conf
and uses /var/tmp in that case.

Without WithRegistriesConf, we would first initialize libimage with
BigFilesTemporaryDir = nil (causing libimage to determine BigFilesTemporaryDir
using a _different_ code path which fails on invalid containers.conf),
and only later set r.imageContext.BigFilesTemporaryDir.

It doesn't make sense that --registries-conf should affect TMPDIR processing
that way, and presumably the code path without --registries-conf is much
more frequently used and the one everyone expects; so drop this aspect of
WithRegistriesConf.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2026-03-02 23:06:53 +01:00
Jan Rodák
f49950c370 Merge pull request #28153 from timcoding1988/swagger-update
Swagger update:  Added missing documented params for already-supported api docs.
2026-03-02 16:40:18 +01:00
Jan Rodák
a11f22292e Merge pull request #28161 from ygalblum/quadlet-volume-mount-options
Quadlet Volume - allow setting mount option without a device
2026-03-02 16:37:35 +01:00
Matt Heon
509e44a005 Merge pull request #28141 from jankaluza/ai-policy
Add LLM (AI) Policy.
2026-03-02 09:18:47 -05:00
Jan Kaluza
f31ab04ec7 Update LLM_POLICY.md
Co-authored-by: Mario Loriedo <mario.loriedo@gmail.com>
Signed-off-by: Jan Kaluza <hanzz.k@gmail.com>
2026-03-02 12:10:57 +01:00
Jan Rodák
e44c9e5b58 Merge pull request #28160 from k9withabone/docs-quadlet-service-name
docs(podman-systemd.unit.5.md): add `ServiceName=` option to all Quadlet types
2026-03-02 11:50:17 +01:00
Matt Heon
559dce7bf8 Merge pull request #28163 from ysinghc/docs-publishport-protocol
docs(podman-systemd.unit.5.md): document protocol support for PublishPort  Fixes: #28146
2026-02-28 20:10:12 -05:00
Matt Heon
4c92142dc5 Merge pull request #27867 from ygalblum/volume-nocreate
Add nocreate option for named volumes
2026-02-28 20:07:19 -05:00
Yuvraj Singh Chauhan
30f067354f docs(podman-systemd.unit.5.md): document protocol support for PublishPort
Fixes: #28146
Signed-off-by: Yuvraj Singh Chauhan <ysinghcin@gmail.com>

Update docs/source/markdown/podman-systemd.unit.5.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Yuvraj Singh Chauhan <24429@iiitu.ac.in>

Update docs/source/markdown/podman-systemd.unit.5.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Yuvraj Singh Chauhan <24429@iiitu.ac.in>

Update docs/source/markdown/podman-systemd.unit.5.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Signed-off-by: Yuvraj Singh Chauhan <24429@iiitu.ac.in>

docs(podman-systemd.unit.5.md): clarify supported protocols for PublishPort

Update docs/source/markdown/podman-systemd.unit.5.md

Co-authored-by: Danish Prakash <contact@danishpraka.sh>
Signed-off-by: Yuvraj Singh Chauhan <24429@iiitu.ac.in>

docs(podman-systemd.unit.5.md): update valid protocols for PublishPort to include sctp (rootful only)

docs(podman-systemd.unit.5.md): clarify supported protocols for PublishPort
2026-02-27 15:30:57 +05:30
Ygal Blum
6c41f55aa7 Quadlet Volume - allow setting mount option without a device
Fixes: #28132

Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2026-02-26 12:27:23 -05:00
Paul Nettleton
f58c9dcbcb docs(podman-systemd.unit.5.md): add ServiceName= option to all Quadlet types
The `ServiceName=` Quadlet option was only documented for `.pod` and
`.artifact` units. However, it applies to all Quadlet types as it is a
global option.

Added `ServiceName=` listing and description to the `[Container]`,
`[Kube]`, `[Network]`, `[Volume]`, `[Build]`, and `[Image]` sections.

Fixes: #27015
Signed-off-by: Paul Nettleton <k9@k9withabone.dev>
2026-02-26 10:54:53 -06:00
Ygal Blum
64ec31ac00 Add nocreate option for named volumes
Add a per-volume 'nocreate' option that prevents automatic creation of
named volumes when they don't exist. When specified, Podman will fail
if the volume is not found instead of creating it automatically.

Usage: -v myvolume:/data:nocreate
       --mount type=volume,src=myvolume,dst=/data,nocreate

See: #27862
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2026-02-26 11:14:32 -05:00
Tim Zhou
e914c30dd5 update swagger changes
Signed-off-by: Tim Zhou <tizhou@redhat.com>
2026-02-26 09:51:15 -05:00
Jan Kaluza
dc9adfeaff Add LLM (AI) Policy.
This commit adds new LLM_POLICY.md which contains our LLM Policy. It is
based on https://docs.google.com/document/d/1VxYDXT3kIiBAFJHY4fsyFRrddtgIKCrFt_juI7ofsXo
which has been discussed on the previous Podman Community Meeting.

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2026-02-26 10:41:06 +01:00
Paul Holzinger
d3a81e3e17 Merge pull request #28150 from sidneychang/docs-rootless-networking-defaults
docs: update rootless default networking mode
2026-02-25 16:34:08 +01:00
2190206983@qq.com
176bab3feb docs: update rootless default networking mode
Signed-off-by: sidneychang <2190206983@qq.com>
2026-02-25 23:17:23 +08:00
Paul Holzinger
2021f2b307 Merge pull request #28080 from containers/renovate/google.golang.org-grpc-1.x
fix(deps): update module google.golang.org/grpc to v1.79.0
2026-02-25 14:35:56 +01:00
Jan Rodák
041f7769a5 Merge pull request #28142 from containers/renovate/openapi-schema-validator-0.x
chore(deps): update dependency openapi-schema-validator to ~=0.7.1
2026-02-25 14:11:49 +01:00
Jan Rodák
4e62f2429a Merge pull request #28138 from Luap99/golangci-lint
update golangci-lint to v2.10.1
2026-02-25 13:53:59 +01:00
Jan Rodák
57ad0b59c4 Merge pull request #28151 from ricardobranco777/rmpod
test/system: fix pod inspect ordering test leak
2026-02-25 12:22:58 +01:00
Paul Holzinger
9a1e5e8eeb cmd/podman-tetsing: fix incorrect error message
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-25 11:06:25 +01:00
Ricardo Branco
960165b8c5 test/system: fix pod inspect ordering test leak
Add missing cleanup.

Signed-off-by: Ricardo Branco <rbranco@suse.de>
2026-02-24 22:46:08 +01:00
Lokesh Mandvekar
39ea7ef794 Merge pull request #28121 from pkoenig10/filterStatus
List all status values in status filter documentation
2026-02-24 17:38:00 +05:30
renovate[bot]
35d088ff83 chore(deps): update dependency openapi-schema-validator to ~=0.7.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-24 10:27:19 +00:00
Paul Holzinger
1492cea16e Merge pull request #28137 from pablomh/patch-1
docs(podman-systemd.unit.5.md): Fix variable syntax
2026-02-23 15:33:02 +01:00
Jan Rodák
54e26a8c7e Merge pull request #28127 from ratijas/work/ratijas/labels 2026-02-23 13:22:06 +01:00
Jan Rodák
459225bad2 Merge pull request #28134 from Veector40/fix-rm-timeout-docs
docs: add examples for rm with --force and --time
2026-02-23 13:10:02 +01:00
Jan Rodák
19a11ac214 Merge pull request #28133 from ricardobranco777/yq
test: Use yq for yaml2json when available
2026-02-23 13:07:34 +01:00
Paul Holzinger
02f0766a79 update golangci-lint to v2.10.1
And remove one false positive comment that got fixed as it seems like.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-23 10:13:48 +01:00
Paul Holzinger
8a0c777017 fix new staticcheck warnings
As reported by golangci-lint v2.10.1.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-23 10:00:51 +01:00
Paul Holzinger
5e3719c81a fix two issues found by nilness
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-23 09:53:35 +01:00
Pablo Méndez Hernández
072018096d docs(podman-systemd.unit.5.md): Fix variable syntax
Fix variable syntax when referencing UID.

Signed-off-by: Pablo Méndez Hernández <pablomh@redhat.com>
2026-02-22 23:05:48 +01:00
Victor Koycheff
fc089d7f1a docs: add examples for rm with --force and --time
Fixes #26365

Signed-off-by: Victor Koycheff <victorkoycheff@gmail.com>
2026-02-22 19:24:02 +02:00
Ricardo Branco
476ca11994 test: Use yq for yaml2json when available
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2026-02-22 11:29:27 +01:00
Ivan Tkachenko
4fae160fcf Fix documentation inconsistency about labels
Fixes #28120

Signed-off-by: Ivan Tkachenko <me@ratijas.me>
2026-02-20 16:10:47 +02:00
Patrick Koenig
0d7f00b4c0 List all status values in status filter documentation
Signed-off-by: Patrick Koenig <pkoenig10@gmail.com>
2026-02-19 09:28:37 -05:00
Miloslav Trmač
ec0f63c6e5 Merge pull request #28106 from Luap99/vendor
vendor: update go.podman.io/... and buildah to latest
2026-02-18 20:27:18 +01:00
Paul Holzinger
72a0a1179e test/buildah-bud: skip build-with-run-mount
That test uses process substitution for the Containerfile which fails
because podman tries to use /dev/fd as context directory.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-18 15:19:57 +01:00
Paul Holzinger
a3198235bf bindings: do not validate source policy on the client
The client and server version can mismatch in which case the client may
fail on something the newer server can understand or the other way
around. Given the server has to parse and validate that output no matter
what there does not seem to be a strong argument for doing this on the
client side again.

Also this means we do leak the sourcepolicy package into the remote
client.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-18 14:18:44 +01:00
Nalin Dahyabhai
474ff994b6 build: connect --source-policy-file, --mount for remote builds
Pass --mount settings and the contents of the --source-policy-file
argument to remote builds.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-18 14:11:12 +01:00
Paul Holzinger
8af2158a83 vendor: update go.podman.io/... and buildah to latest
Mainly so we get a commit after [1] which makes the renovate auto update
work again. And also buildah to get a fix for a flake [2].

[1] https://github.com/containers/container-libs/pull/635
[2] https://github.com/containers/buildah/pull/6688

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2026-02-18 14:07:29 +01:00
Jan Rodák
38e1aa7ba0 Merge pull request #28085 from JCBird1012/main
compat/api: honor VolumeOptions.Subpath for HostConfig.Mounts
2026-02-18 10:48:54 +01:00
Jan Rodák
c581a93da5 Merge pull request #28095 from MayorFaj/fix/28031-publish-option
fix: add validation for --publish flag in container restore
2026-02-18 10:19:06 +01:00