28258 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Ashley Cui	48dfbd2dd3	Vendor container-libs@main ... Signed-off-by: Ashley Cui <acui@redhat.com>	2026-09-01 11:30:39 -04:00
Paul Holzinger	3b489e41bf	Merge pull request #29689 from podman-container-tools/renovate/github.com-shirou-gopsutil-v4-4.x ... Update module github.com/shirou/gopsutil/v4 to v4.26.8	2026-09-01 16:40:53 +02:00
Paul Holzinger	7fd62c4410	Merge pull request #29663 from podman-container-tools/renovate/github.com-onsi-gomega-1.x ... Update module github.com/onsi/gomega to v1.43.0	2026-09-01 15:20:16 +02:00
Jan Rodák	0b2d7729c5	Merge pull request #29654 from Atishyy27/fix/subpath-equals-truncation ... fix(libpod): keep '=' in a volume subpath	2026-09-01 13:55:17 +02:00
renovate[bot]	e0013ac4a8	Update module github.com/shirou/gopsutil/v4 to v4.26.8 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-01 11:42:43 +00:00
Danish Prakash	7efd442600	Merge pull request #29690 from ricardobranco777/410_selinux ... test/system: Update test to handle new error message from runc 1.5.0	2026-09-01 16:38:13 +05:30
Paul Holzinger	553e9fbe14	Merge pull request #29645 from podman-container-tools/renovate/github.com-sirupsen-logrus-1.x ... Update module github.com/sirupsen/logrus to v1.10.2	2026-09-01 12:59:06 +02:00
Paul Holzinger	9242ecc42f	Merge pull request #29673 from Xiaowen-Yang/codex/fix-29664-attach-exited ... api: avoid reinitializing exited containers on logs-only attach	2026-09-01 12:36:00 +02:00
Paul Holzinger	583a79b9d9	Merge pull request #29681 from rgaiacs/improve-docs ... Fix list markup in Markdown	2026-09-01 11:43:55 +02:00
Paul Holzinger	2866ef50a1	Merge pull request #29684 from giuseppe/fix-overlay-volume-userns ... libpod: fix :O overlay volumes in a userns	2026-09-01 11:39:26 +02:00
Ricardo Branco	7e8002dd08	test/system: Update test to handle new error message from runc 1.5.0 ... runc 1.5.0 switched to a safe procfs API for setting SELinux labels, so reopened handles no longer carry a /proc/self path in error messages, e.g. "write /1/attr/keycreate: invalid argument" instead of "write /proc/self/attr/keycreate: invalid argument". Relax the regex to match on "attr/keycreate" without requiring the proc/self prefix. Signed-off-by: Ricardo Branco <rbranco@suse.de>	2026-09-01 11:01:36 +02:00
Giuseppe Scrivano	c56c2fc5f8	libpod: do not block idmap with overlay (O) volumes ... Allow the `idmap` volume option to be combined with the overlay `O` option, e.g. `-v /src:/mnt:O,idmap` or `-v myvol:/mnt:O,idmap`. Previously any option other than `U`, `upperdir` and `workdir` combined with `O` was rejected. The parser in GenVolumeMounts now accepts `idmap` alongside `O` and rejects the first disallowed option instead of counting flags. The mappings from the container's user namespace are threaded onto the generated overlay mount so the runtime idmaps it. This is done for both the anonymous/host-path overlay volumes and the named-volume overlay path, which are handled by separate code. When a volume is idmapped the runtime shifts the mount so that on-disk IDs map identically into the container, so the overlay backing dirs (contentDir, upperdir, workdir) must be owned by real root (0) rather than the host IDs the container root maps to; otherwise they surface as the overflow ID inside the container and are inaccessible. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>	2026-09-01 09:50:51 +02:00
Giuseppe Scrivano	58489b82b4	libpod: fix :O overlay volumes in a userns ... When the user owning the storage is not mapped into the container user namespace (e.g. root with --userns=auto), the runtime cannot mount an overlay volume from inside the user namespace. Mount the overlay in podman instead and pass the runtime a bind mount. Closes: https://github.com/podman-container-tools/podman/issues/28758 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>	2026-09-01 09:50:51 +02:00
Xiaowen-Yang	1c8f2963a1	Preserve exited state for logs-only HTTP attach ... Fixes: #29664 Signed-off-by: Xiaowen-Yang <xiaowenyang52@gmail.com>	2026-08-31 20:31:24 +02:00
Paul Holzinger	942ebd6c08	Merge pull request #29648 from podman-container-tools/renovate/google.golang.org-grpc-1.x ... Update module google.golang.org/grpc to v1.83.2	2026-08-31 19:31:00 +02:00
Brent Baude	2702e99bbe	Merge pull request #29659 from Luap99/network-inspect-lock ... network inspect: do not walk all containers on no match	2026-08-31 09:36:22 -05:00
renovate[bot]	0cce46f890	Update module github.com/onsi/gomega to v1.43.0 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-08-31 13:59:45 +00:00
Paul Holzinger	9c4cfaf7d9	Merge pull request #29590 from prabhat-kumar96/fix-windows-hyperv-9p-detach ... pkg/machine/hyperv: detach 9p server from parent console	2026-08-31 15:57:11 +02:00
Paul Holzinger	21a9684064	Merge pull request #29686 from l0rd/fix-gvproxy-arm64 ... Use Windows GUI version of gvproxy on arm64 too	2026-08-31 15:55:54 +02:00
Lokesh Mandvekar	0926e1e7ea	Merge pull request #29671 from podman-container-tools/renovate/r-lib-actions-2.x ... Update r-lib/actions action to v2.13.0	2026-08-31 09:53:29 -04:00
Lokesh Mandvekar	bf4c1b62d1	Merge pull request #29676 from podman-container-tools/renovate/github-issue-labeler-3.x ... Update github/issue-labeler action to v3.5	2026-08-31 09:52:52 -04:00
Mario Loriedo	3656834622	Use Windows GUI version of gvproxy on arm64 too ... `gvproxy` is released in two flavors on Windows: GUI and Console. The GUI version is what we want: it doesn't inherit the parent process console and isn't killed if the parent console is closed. On amd64 we already pulled the GUI version but not for the arm64 version (the names on the gvisor-tap-vsock release page don't help). This commit fixes this problem. Related to https://github.com/podman-container-tools/podman/issues/29573 Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-08-31 13:20:18 +02:00
Paul Holzinger	1534b1ee86	network inspect: do not walk all containers on no match ... Avoid the expensive container walk when a non existing network is passed in. Because getting the network status needs to hold locks this could be blocked for a long time otherwise for no reason. Fixes: #29647 Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-08-31 13:05:42 +02:00
Jan Rodák	c30add3f1c	Merge pull request #29667 from CodeWithAK28/remote-push-signing-error ... pkg/domain/infra/tunnel: error when signing a remote push	2026-08-31 11:32:46 +02:00
Raniere Gaia Costa da Silva	50f9b00636	Fix list markup in Markdown ... Signed-off-by: Raniere Gaia Costa da Silva <Raniere.CostadaSilva@gesis.org>	2026-08-31 10:13:34 +02:00
renovate[bot]	d5db0e5ebb	Update github/issue-labeler action to v3.5 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-08-30 19:26:29 +00:00
renovate[bot]	4b94ccce9f	Update module google.golang.org/grpc to v1.83.2 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-08-30 09:28:31 +00:00
Anisha Khairnar	ee1d224bad	test/e2e: skip the save signature test on remote ... Signed-off-by: Anisha Khairnar <anishakhairnar284@gmail.com>	2026-08-29 14:19:26 +05:30
renovate[bot]	26e9020f86	Update r-lib/actions action to v2.13.0 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-08-28 20:34:52 +00:00
Anisha Khairnar	123b9024d5	pkg/domain/infra/tunnel: error when signing a remote push ... Signed-off-by: Anisha Khairnar <anishakhairnar284@gmail.com>	2026-08-28 12:17:51 +05:30
Jan Rodák	7a6c0a0504	Merge pull request #28100 from parmisean/parmisean/implement-ssh-session-type ... pkg/bindings: add dial-stdio fallback for SSH connections	2026-08-28 05:02:14 +02:00
Matt Heon	f542424eab	Merge pull request #29603 from gerryd/feature/create-passwd ... Add support for --passwd to the create command	2026-08-27 22:03:01 -04:00
Gerry Demaret	bd8de9f7aa	Add support for --passwd to the create command ... Give create the same --passwd flag as run currently has. Signed-off-by: Gerry Demaret <gerry@x-net.be>	2026-08-27 15:46:30 +02:00
Atishyy27	44f7900e0d	fix(libpod): keep '=' in a volume subpath ... The subpath mount option is parsed with strings.Split(o, "=")[1], so it keeps only the text between the first and second '='. A subpath that contains '=' gets cut short and the container mounts a different directory than the one that was asked for. --mount type=volume,src=v,dst=/mnt,subpath=/opt/a=b/c mounts /opt/a Signed-off-by: Atishyy27 <sethatishayjain@gmail.com>	2026-08-27 18:20:55 +05:30
prabhat-kumar96	debcacc699	pkg/machine: detach helper processes from parent console on Windows ... When starting a machine on Windows, background helper processes (podman.exe machine server9p, gvproxy, and win-sshproxy) could be terminated when the parent CMD/PowerShell session closed. 1. For podman.exe machine server9p (a console subsystem binary), set CreationFlags to CREATE_NO_WINDOW so it runs without attaching to the parent console. 2. For GUI binaries (gvproxy and win-sshproxy), configure DETACHED_PROCESS so they outlive the invoking console session. Fixes: #29573 Signed-off-by: prabhat-kumar96 <prabhatmathur9927@gmail.com>	2026-08-27 18:11:12 +05:30
Paul Holzinger	21326bf274	Merge pull request #29642 from vtushar06/bindings-parallel ... bindings: use a per-test network config dir, allow parallel	2026-08-27 12:52:39 +02:00
Jan Rodák	5eab541350	Merge pull request #29651 from vtushar06/fix-bevalidjson ... test/utils: fix BeValidJSON and remove IsJSONOutputValid	2026-08-27 12:47:08 +02:00
Paul Holzinger	cb3ff063fd	Merge pull request #29655 from podman-container-tools/renovate/github.com-openshift-imagebuilder-1.x ... Update module github.com/openshift/imagebuilder to v1.2.22	2026-08-27 12:44:50 +02:00
Paul Holzinger	a57c6b15d3	Merge pull request #29649 from jiwahn/optimize-dir-empty-check ... libpod(refactor): optimize directory empty check	2026-08-27 12:26:03 +02:00
renovate[bot]	3e18881a4a	Update module github.com/openshift/imagebuilder to v1.2.22 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-08-26 23:47:21 +00:00
Tushar Verma	d153f4750b	test/e2e: remove IsJSONOutputValid ... Asserting a bool against an expected bool says nothing about the output when it fails. BeValidJSON() prints it, and now that the matcher handles a non match properly the negative rows in the info and version table tests can use it too. Part of #18540. Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-26 22:51:51 +05:30
Tushar Verma	d685b5a87b	test/utils: BeValidJSON should not error on invalid json ... Match() returned the unmarshal error for input that is simply not json. Gomega treats a non nil error as a failure to evaluate, so it fails the assertion either way and ToNot(BeValidJSON()) fails on exactly the input it is meant to accept: Expect("{not json").ToNot(BeValidJSON()) --> invalid character 'n' looking for beginning of object key string A non match is (false, nil), the error return is for input the matcher cannot evaluate, which is the wrong type case above it. Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-26 22:51:51 +05:30
Tushar Verma	272f6e1321	bindings: wait for the exec session to finish ... ExecStart returning only means the session was started, so inspecting it straight after can still catch it running. It passed serially because echo is quick, but it failed the first time the suite ran under -p: [FAILED] session should not be running Expected <bool>: true to be false Wait for Running to go false before checking the exit code. Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-26 22:03:04 +05:30
Tushar Verma	77e8fdb783	bindings: allow running the tests in parallel ... Gate -p on GINKGO_PARALLEL the same way ginkgo-run does, so the suite can be put back to serial with GINKGO_PARALLEL=n like pkg/machine/e2e already does. Part of #18540. Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-26 22:03:04 +05:30
Tushar Verma	a6c9e0954f	bindings: mark the network tests serial ... The network config dir is shared between all the services these tests start, on purpose, so podman can keep subnet allocation consistent. That means the unfiltered prune in the networks BeforeEach, and system.Prune which also prunes networks, would take out networks belonging to another test once the suite runs in parallel. Mark both describes serial like test/e2e does for its own network prune test rather than trying to give each test its own config dir. Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-26 22:03:04 +05:30
Sean Prouty	ee681f80e9	pkg/bindings: add dial-stdio fallback for SSH connections ... Fixes: #27814 Signed-off-by: Sean Prouty <parmisean@proton.me>	2026-08-26 09:05:12 -07:00
Matt Heon	a1c4f9c0e6	Merge pull request #29634 from hihry/fix/Overriding ... specgen: ensure keep-id overrides image USER	2026-08-26 11:57:00 -04:00
Brent Baude	fb1cb4fa6e	Merge pull request #29643 from vtushar06/remove-os-exit ... test/e2e: do not use os.Exit for error handling	2026-08-26 03:33:57 -05:00
Jiwoo Ahn	63ab237222	libpod(refactor): optimize directory empty check ... No need to read the entire directory for empty check. Extract redundant check into helper Signed-off-by: Jiwoo Ahn <ikwydls1314@gmail.com>	2026-08-26 16:40:12 +09:00
Danish Prakash	9dc5707a3d	Merge pull request #29638 from CodeWithAK28/bindings-no-serialize-auth-fields ... pkg/bindings: keep auth fields out of the query string	2026-08-26 12:49:50 +05:30