Commit graph

12830 commits

Author SHA1 Message Date
Giuseppe Scrivano
331ce0f7ee
utils: return error message from StartTransientUnit
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
(cherry picked from commit eea5d25126)
2021-09-20 16:15:29 +02:00
Giuseppe Scrivano
046fa27408
utils: raise warning only on cgroupv2
if it is not running on cgroup v2, print only a debug message since
rootless users cannot create the cgroup.

commit 9c1e27fdd5 introduced the regression.

[NO TESTS NEEDED]

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
(cherry picked from commit 4caca09698)
2021-09-20 16:15:23 +02:00
Giuseppe Scrivano
40eeb7d3ba
runtime: move pause process to scope
make sure the pause process is moved to its own scope as well as what
we do when we join an existing user+mount namespace.

Closes: https://github.com/containers/podman/issues/11560

[NO TESTS NEEDED]

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
(cherry picked from commit a2c8b5d9d6)
2021-09-17 10:38:02 +02:00
Giuseppe Scrivano
e6fe5d6312
system: move MovePauseProcessToScope to utils
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
(cherry picked from commit 72534a74b3)
2021-09-17 10:38:00 +02:00
Giuseppe Scrivano
ae5a5b51b0
system: always move pause process when running on systemd
when running on a systemd with systemd, always try to move the pause
process to its own scope.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
(cherry picked from commit 9c1e27fdd5)
2021-09-17 10:37:59 +02:00
Giuseppe Scrivano
34c9ce2ec9
system: avoid reading pause pid file
we already know the path to the pause PID file, no need to calculate
it again.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
(cherry picked from commit fa9728c550)
2021-09-17 10:37:55 +02:00
OpenShift Merge Robot
d6884dedc3
Merge pull request #11616 from mheon/bump_340rc1
[CI:DOCS] Bump to v3.4.0-RC1
2021-09-16 17:08:08 -04:00
Matthew Heon
41cd360dc8 Bump to v3.4.0-dev
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 15:16:51 -04:00
Matthew Heon
bd47b9eff8
Bump to v3.4.0-rc1
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 15:15:25 -04:00
OpenShift Merge Robot
2a30b60666
Merge pull request #11598 from mheon/34_backportsreleasenotes
Backports and release notes for v3.4.0-RC1
2021-09-16 15:05:28 -04:00
Matthew Heon
29edeaa892 Fix buildah-bud tests by using main's diff file
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 13:39:42 -04:00
Matthew Heon
66eb692243 Fix podman-build manpages by using version from main
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 11:18:24 -04:00
Matthew Heon
a647e1d18a Fix release notes
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 11:00:05 -04:00
Matthew Heon
0d43151c23 Remove Pod CPU tests
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 11:00:05 -04:00
Matthew Heon
fd56c83862 Set DEST_BRANCH in cirrus to fix CI
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 11:00:05 -04:00
Matthew Heon
4841ec5c6b Final release notes for v3.4.0 RC1
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 11:00:05 -04:00
Giuseppe Scrivano
5532cd488b libpod: honor --cgroups=split also with pods
Honor --cgroups=split also when the container is running in a pod.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2021-09-16 11:00:05 -04:00
Nalin Dahyabhai
e07dccc3ad build: take advantage of --platform lists
The builder can take a list of platforms in the Platforms field of its
BuildOptions argument, and we should definitely take advantage of that.

The `bud-multiple-platform-values` test from buildah exercises support
for this, so
[NO TESTS NEEDED]

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2021-09-16 11:00:05 -04:00
Aditya Rajan
c7c4cb8867 build.bats: fix copy tests after containers/buildah#3486
Fix copy tests after https://github.com/containers/buildah/pull/3486

[NO TESTS NEEDED]

Signed-off-by: Aditya Rajan <arajan@gmail.com>
2021-09-16 11:00:05 -04:00
Aditya Rajan
c407813d67 build: mirror --authfile to filesystem if pointing to FD instead of file
Following commit makes sure that podman mirrors --authfile to a temporary
file in filesystem if arg is pointing to an FD instead of actual file
as FD can be only consumed once.

Reference:
* https://github.com/containers/buildah/pull/3498
* https://github.com/containers/buildah/issues/3070

[NO TESTS NEEDED]

Signed-off-by: Aditya Rajan <arajan@redhat.com>
2021-09-16 11:00:05 -04:00
Matthew Heon
69e327378f Bump to Buildah v1.23.0
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 11:00:05 -04:00
Matthew Heon
331d4c5c78 Further release notes updates
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 11:00:05 -04:00
Anders F Björklund
901cf71a60 Show variant and codename of the distribution
Along with the name (id) and the version(_id)

But only show the information if is available

Examples: Fedora CoreOS, Ubuntu Focal

[NO TESTS NEEDED]

Signed-off-by: Anders F Björklund <anders.f.bjorklund@gmail.com>
2021-09-16 11:00:05 -04:00
Jelle van der Waa
507000a304 api: handle nil pointer dereference in rest endpoints
When `?all=garbage` is passed to an API endpoint schema validation fails
and err is nil. Wrapf uses err to create an error message causing a nil
pointer dereference.

Signed-off-by: Jelle van der Waa <jvanderwaa@redhat.com>
2021-09-16 11:00:05 -04:00
Paul Holzinger
702e524ff7 Fix example in podman machine init man page
Fixes #11582

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2021-09-16 09:42:14 -04:00
Jelle van der Waa
c8cbd87fdc Document all query parameter for /libpod/images/prune
Signed-off-by: Jelle van der Waa <jvanderwaa@redhat.com>
2021-09-16 09:42:14 -04:00
Giuseppe Scrivano
939db105c3 tests: enable --cgroups=disabled test for rootless
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2021-09-16 09:42:14 -04:00
Giuseppe Scrivano
e0881fd5eb tests: simplify --cgroups=disabled test
read the cgroup directly from the container.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2021-09-16 09:42:14 -04:00
Jhon Honce
74bc365eb6 Enhance bindings for IDE hints
* Follow https://pkg.go.dev/cmd/go#hdr-Generate_Go_files_by_processing_source
  for leading comment
* Add godoc strings for all exposed methods for IDE support
* Copy field godoc strings into generated code as function godoc string
* Remove unused/unnecessary fields from generator.go structures
* Cleanup code regarding template usage

Signed-off-by: Jhon Honce <jhonce@redhat.com>
2021-09-16 09:42:14 -04:00
Chris Evich
e37883f13e Cirrus: NM/CNI workaround + Remove prior-Ubuntu
Ref: https://github.com/containers/automation_images/pull/88

Signed-off-by: Chris Evich <cevich@redhat.com>
2021-09-16 09:42:14 -04:00
Paul Holzinger
0ca62196a0 libpod: rootful close binded ports
For rootful users ports are forwarded via iptables. To make sure no
other process tries to use them, libpod will bind the ports and pass the
fds to conmon. There seems to be race when a container is restarted
because libpod tries to bind the port before the conmon process exited.

The problem only hapens with the podman service because it keeps the
connection open. Once we have the fd and passed it to conmon the
podman service should close the connection.

To verify run `sudo ss -tulpn` and check that only the conmon process
keeps the port open. Previously you would also see the podman server
process listed.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2021-09-16 09:42:14 -04:00
Paul Holzinger
b6789c3d5f fix restart always with rootlessport
When a container is automatically restarted due its restart policy and
the container uses rootless cni networking with ports forwarded we have
to start a new rootlessport process since it exits with conmon.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2021-09-16 09:42:14 -04:00
Paul Holzinger
ffc8e57d3b remove rootlessport socket to prevent EADDRINUSE
When we restart a container via podman restart or restart policy the
rootlessport process fails with `address already in use` because the
socketfile still exists.
This is a regression and was introduced in commit abdedc31a2.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2021-09-16 09:42:14 -04:00
Giuseppe Scrivano
fd8d332a4e test: enable --cgroup-parent test
and fix it for running with runc.

Closes: https://github.com/containers/podman/issues/11165

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2021-09-16 09:42:14 -04:00
Hyeon Kim
33591c3ef4 Search gvproxy with config.FindHelperBinary()
Closes #11531

[NO TESTS NEEDED]

Signed-off-by: Hyeon Kim <simnalamburt@gmail.com>
2021-09-16 09:42:14 -04:00
Jason T. Greene
1af0f8934c Add deprecated fields for 1.22+ clients that still expect them
Signed-off-by: Jason Greene <jason.greene@redhat.com>
2021-09-16 09:42:14 -04:00
Daniel J Walsh
c6e4453f62 If container exits with 125 podman should exit with 125
fixes: https://github.com/containers/podman/issues/11540

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-09-16 09:42:14 -04:00
Ashley Cui
5829d62ea0 Use default username for podman machine ssh
When using the defaut conection for podman machine ssh, use the default
username too.

Signed-off-by: Ashley Cui <acui@redhat.com>
2021-09-16 09:42:14 -04:00
Paul Holzinger
c487389fa5 bump c/common to v0.44.0
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2021-09-16 09:42:14 -04:00
Matthew Heon
069d90124d Initial release notes for v3.4.0 RC1
Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 09:42:14 -04:00
Matthew Heon
3c24d1fda2 Remove pod create options --cpus and --cpuset-cpus
These are not presently functional - we need a rewrite of how the
pod cgroup is handled first.

Signed-off-by: Matthew Heon <mheon@redhat.com>
2021-09-16 09:42:14 -04:00
OpenShift Merge Robot
fcb22e82b5
Merge pull request #11591 from baude/v3.4aarch64backport
Use new aarch64 fcos repos
2021-09-15 10:34:32 -04:00
baude
fceec6972f Use new aarch64 fcos repos
Now that aarch64 fcos is an official thing, we no longer need to use the side repo (for lack of a better word).  We can now use the same image lookup technique as x86_64.  I removed the special lookup, moved the x86_64 lookup to generic arch, and removed the arch specific files that we no longer needed.

[NO TESTS NEEDED]

Signed-off-by: baude <baude@redhat.com>
2021-09-15 07:43:12 -05:00
OpenShift Merge Robot
5e54f72a9f
Merge pull request #11562 from Luap99/revert-log
[v3.4] Revert "logs: adjust handling around partial log messages"
2021-09-14 11:04:15 -04:00
Paul Holzinger
31604b43d1
Revert "logs: adjust handling around partial log messages"
This reverts commit 21f396de6f.

Changing the log endpoint is a breaking change we should not do in 3.4.

[NO TESTS NEEDED]

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2021-09-14 11:40:13 +02:00
OpenShift Merge Robot
cc94914474
Merge pull request #11550 from atykhyy/patch-2
Fix #11444: remote breaks with stdout redirection
2021-09-13 14:02:53 -04:00
OpenShift Merge Robot
73422de08d
Merge pull request #11548 from containers/dependabot/go_modules/github.com/containers/storage-1.36.0
Bump github.com/containers/storage from 1.35.0 to 1.36.0
2021-09-13 13:07:52 -04:00
OpenShift Merge Robot
125f90c54a
Merge pull request #11537 from TomSweeneyRedHat/dev/tsweeney/fixhyphen
[CI:DOCS] Remove short 'a' option from all-tags
2021-09-13 11:33:51 -04:00
Anton Tykhyy
c23f81fab6
Fix #11444: remote breaks with stdout redirection
`setConsoleMode` should do nothing if the handle is not a terminal. The proposed change is [exactly what `golang.org/x/term/IsTerminal()` does on Windows](https://cs.opensource.google/go/x/term/+/6886f2df:term_windows.go).

[NO TESTS NEEDED]

Signed-off-by: Anton Tykhyy <atykhyy@gmail.com>
2021-09-13 17:42:48 +03:00
TomSweeneyRedHat
a8875faca1 [CI:DOCS] Remove short 'a' option from all-tags
The short option 'a' for the --all-tags option in the pull
page is not valid, remove it.

Addresses: #11536

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2021-09-13 09:27:57 -04:00