Commit Graph

25616 Commits

Author SHA1 Message Date
Nalin Dahyabhai
db2baee9fa API handler: don't force the IdentityLabel flag
Don't force the IdentityLabel option one way or another when the client
doesn't specifically request one or the other, so that the server can
choose to use its default behavior.

Fixes #26669

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-07-23 15:54:47 -04:00
Nalin Dahyabhai
3e673591ad Update compat-volumes setting for remotes
The "compat-volumes" setting shouldn't be provided by the compat build
endpoint, the docker daemon's isn't expected to recognize it.

It is also a conditional boolean flag, so if it isn't specified by the
caller, don't send a value from a client to the server, so that the
server will be able to apply its own default.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-07-23 15:54:28 -04:00
Nalin Dahyabhai
bf79a9b71e Update inherit-labels setting for remotes
The inherit-labels setting is a conditional boolean flag, so if it isn't
specified either way by the caller, don't send a value from a client to
the server, so that the server will be able to apply its own default.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-07-23 15:54:08 -04:00
Nalin Dahyabhai
bfe6cbe319 pkg/emulation.parseBinfmtMisc(): accept empty "flags" fields
When parsing an entry in /proc/sys/fs/binfmt_misc, don't return an error
if we find an empty "flags" field in the file.  Wine packaged for Fedora
provides a binfmt.d file that results in such a file, so... it's normal.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-07-23 15:53:39 -04:00
Nalin Dahyabhai
a615dde1a5 build endpoint: document the "timestamp" flag
The "timestamp" flag has been around for ages, but we never documented
it in the API.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-07-23 15:53:07 -04:00
Nalin Dahyabhai
7517e3267a remote build: relay more new flags introduced in buildah 1.41
Wire up the source-date-epoch, rewrite-timestamp, and created-annotation
flags so that a client can correctly ask a server to honor them.

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2025-07-23 15:52:43 -04:00
tomsweeneyredhat
97103ffef5 Add Buildah build's passwd test helper
Add the passwd test helper used by Buildah's build
test system.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-07-23 10:36:22 -04:00
tomsweeneyredhat
2f71314b4a Add CLI updates for inherit and unset annotations
Add CLI updates for --inheritannotations and --unsetannotations

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-07-23 10:36:22 -04:00
tomsweeneyredhat
97f27f35a5 Add missing manpages options for Buildah v1.41.0
Add the missing man page options for `podman build`,
`podman farm build`, and `podman image build`.  These
are new to `buildah build` with Buildah v1.41.0.

They are:
  * created-annotation
  * inherit-annotations
  * rewrite-timestamp
  * source-date-epoch
  * unsetannotation

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-07-23 10:36:22 -04:00
tomsweeneyredhat
048729a560 Bump to Buildah v1.41.0
Bump Buildah to v1.41.0 in preparation for
Podman v5.6

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-07-23 10:36:22 -04:00
openshift-merge-bot[bot]
4833d31dfa Merge pull request #26675 from containers/renovate/github.com-onsi-gomega-1.x
fix(deps): update module github.com/onsi/gomega to v1.38.0
2025-07-23 14:15:37 +00:00
renovate[bot]
ca5deaace1 fix(deps): update module github.com/onsi/gomega to v1.38.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-23 00:15:40 +00:00
openshift-merge-bot[bot]
62dd921ad9 Merge pull request #26557 from eulores/patch-2
Quadlet - fix dropin overwrites if different parent dirs
2025-07-22 18:29:21 +00:00
Paul Holzinger
cfdf27b350 test/system: add quadlet drop-in regression test for subdirs
Test to ensure subdir overwrites work correctly, see #26555.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-22 16:34:37 +02:00
Andreas
022bac25ea Quadlet - fix dropin overwrites if different parent dirs
fixes #26555

Signed-off-by: Andreas <43118918+eulores@users.noreply.github.com>
2025-07-22 14:42:53 +02:00
openshift-merge-bot[bot]
04a589fea3 Merge pull request #26668 from containers/renovate/golangci-golangci-lint-2.x
chore(deps): update dependency golangci/golangci-lint to v2.3.0
2025-07-22 09:48:37 +00:00
renovate[bot]
ea5b83c0cb chore(deps): update dependency golangci/golangci-lint to v2.3.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-21 18:18:40 +00:00
openshift-merge-bot[bot]
051676bc97 Merge pull request #26330 from flouthoc/quadlet-work
Add support for `podman quadlet`
2025-07-21 12:36:48 +00:00
openshift-merge-bot[bot]
d13ded62db Merge pull request #26662 from Xyz00777/patch-1
added updated state in podman-auto-update.1.md.in
2025-07-21 10:49:14 +00:00
Xyz00777
0fda2d8aa2 added updated state in podman-auto-update.1.md.in
added missing state "pending" for updated is avialable. im not sure if others missing, i just found this missing while creating a script

Signed-off-by: Xyz00777 <52142054+Xyz00777@users.noreply.github.com>
2025-07-20 18:01:21 +02:00
Matt Heon
f293c1a179 Initial implementation of podman quadlet commands
This adds `podman quadlet list`, `podman quadlet install`,
`podman quadlet rm` and `podman quadlet print`.

Signed-off-by: Matt Heon <mheon@redhat.com>
Co-authored-by: flouthoc <flouthoc.git@gmail.com>
Signed-off-by: flouthoc <flouthoc.git@gmail.com>
2025-07-18 13:57:11 -07:00
openshift-merge-bot[bot]
b2ccef27fa Merge pull request #26655 from containers/renovate/common-image-and-storage-deps
fix(deps): update module github.com/containers/common to v0.64.0
2025-07-17 17:00:16 +00:00
renovate[bot]
3c33b33424 fix(deps): update module github.com/containers/common to v0.64.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-17 04:10:47 +00:00
openshift-merge-bot[bot]
0ae8a689c0 Merge pull request #26394 from Luap99/code-doc
docs: add description about our code structure
2025-07-16 19:18:05 +00:00
Paul Holzinger
82ad043197 docs: add description about our code structure
Document most important directories when trying to understand our
project.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-16 15:59:48 +02:00
openshift-merge-bot[bot]
27487fd94d Merge pull request #26643 from Luap99/rm-dead-conmon
podman rm: handle case where conmon was killed
2025-07-16 12:39:11 +00:00
openshift-merge-bot[bot]
39868323a2 Merge pull request #26648 from containers/renovate/common-image-and-storage-deps
fix(deps): update common, image, and storage deps
2025-07-16 10:58:34 +00:00
renovate[bot]
da3df0c45b fix(deps): update common, image, and storage deps
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-16 04:46:14 +00:00
Paul Holzinger
c1cf4b0d89 podman rm: handle case where conmon was killed
When conmon was killed podman rm -f currently fails but running it again
then works which doesn't really makes sense. We should properly remove
the contianer even if conmon is dead.

In fact the code already handles ErrConmonDead as stop error when we
remove the container but this error was never thrown anywhere. To fix
this throw ErrConmonDead instead of ErrInternal because that is not an
intenral error if something else killed conmon.

With this we can correctly cleanup and remove the container. The fact
that this works on the first try is important for quadlet units as they
only run the ExecStopPost= command once to remove it.

Fixes: #26640

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-15 17:15:19 +02:00
Paul Holzinger
8b1f06bf8f podman inspect: fix error difference between local and remote
There is no reason for local and rmeote to use a different error that
just differs in quoting. Make them consitent to simplify the tests.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-15 17:15:19 +02:00
openshift-merge-bot[bot]
4364db989a Merge pull request #26638 from containers/renovate/common-image-and-storage-deps
Update module github.com/containers/storage to v1.59.0
2025-07-15 09:51:46 +00:00
openshift-merge-bot[bot]
f3761f97d1 Merge pull request #26619 from Craig-Spencer-12/exec-pid-leak-test
Fix test that checks for podman exec leaks
2025-07-15 09:38:01 +00:00
openshift-merge-bot[bot]
c2e4f33b91 Merge pull request #26637 from containers/renovate/github.com-opencontainers-cgroups-0.x
Update module github.com/opencontainers/cgroups to v0.0.4
2025-07-15 09:26:47 +00:00
renovate[bot]
21356fa06b Update module github.com/containers/storage to v1.59.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-15 02:16:24 +00:00
renovate[bot]
df7d787b4c Update module github.com/opencontainers/cgroups to v0.0.4
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-14 23:46:15 +00:00
openshift-merge-bot[bot]
6b9a3066b6 Merge pull request #26631 from Luap99/autoupdate-error
podman auto-update: include container in invalid policy message
2025-07-14 17:34:37 +00:00
openshift-merge-bot[bot]
9ed9da3446 Merge pull request #26602 from containers/renovate/common-image-and-storage-deps
Update common, image, and storage deps
2025-07-14 16:47:20 +00:00
Craig Spencer
55296e1c44 Fix test that checks for podman exec leaks
Updated helper function "find_exec_pid_files" and called it the "podman exec - leak check" test.

Fixes: #26616

Signed-off-by: Craig Spencer <craig.spencer812@gmail.com>
2025-07-14 12:18:17 -04:00
openshift-merge-bot[bot]
b05b9d043d Merge pull request #26533 from ArthurWuTW/26506
volume export: refuse to write to terminal (TTY)
2025-07-14 15:58:56 +00:00
renovate[bot]
e899f49926 Update common, image, and storage deps
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-14 15:42:59 +00:00
Arthur Wu
b48eb6e2fb volume export: refuse to write to terminal (TTY)
Prevent `podman volume export` from showing raw tar contents directly to the terminal (STDOUT). If not redirected and without output flag, error message is expected.

Fixes: #26506

Signed-off-by: Arthur Wu <lion811004@gmail.com>
2025-07-14 10:20:22 -04:00
openshift-merge-bot[bot]
ffcd19735f Merge pull request #26630 from containers/renovate/go-github.com-go-viper-mapstructure-v2-vulnerability
Update module github.com/go-viper/mapstructure/v2 to v2.3.0 [SECURITY]
2025-07-14 13:38:44 +00:00
Paul Holzinger
e55270a51a podman auto-update: include container in invalid policy message
I noticed recently when I made a typo that then auto-update errored but
it did not tell me which container was incorrect so I had to check all
containers myself. Include the container ID in the error to make it
clear which container has the issue.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-07-14 14:34:22 +02:00
renovate[bot]
4bc22a4b3c Update module github.com/go-viper/mapstructure/v2 to v2.3.0 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-14 12:31:17 +00:00
openshift-merge-bot[bot]
76b70b630c Merge pull request #26612 from Luap99/Maintainers
Maintainers: add Lewis, Jan and Nicola as Reviewers
2025-07-14 12:30:16 +00:00
openshift-merge-bot[bot]
7efa0b829a Merge pull request #26611 from containers/renovate/golang.org-x-net-0.x
fix(deps): update module golang.org/x/net to v0.42.0
2025-07-11 14:28:26 +00:00
openshift-merge-bot[bot]
de51ef1cd6 Merge pull request #26615 from containers/renovate/golangci-golangci-lint-2.x
chore(deps): update dependency golangci/golangci-lint to v2.2.2
2025-07-11 14:25:15 +00:00
openshift-merge-bot[bot]
c305a932cc Merge pull request #26609 from Luap99/bindings-fixes
pkg/bindings/containers: some attach/logs handling fixes
2025-07-11 14:16:31 +00:00
openshift-merge-bot[bot]
b059e47ff2 Merge pull request #26604 from l0rd/seccomp-winpath
Fix seccomp profile path on Windows
2025-07-11 14:13:35 +00:00
renovate[bot]
0c586807ea chore(deps): update dependency golangci/golangci-lint to v2.2.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-11 13:37:46 +00:00