Commit graph

15111 commits

Author SHA1 Message Date
OpenShift Merge Robot
6ecf33a4cd
Merge pull request #14227 from rhatdan/test
Make sure tests are cleaned up when they complete
2022-05-13 11:00:48 +02:00
openshift-ci[bot]
9cf38a0afb
Merge pull request #14206 from n1hility/win-machine-events
Add support for machine events on Windows
2022-05-12 21:49:19 +00:00
Daniel J Walsh
b8103640a2
Make sure tests are cleaned up when they complete
Fixes: https://github.com/containers/podman/issues/13789

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-05-12 16:31:13 -04:00
Jason T. Greene
7804f4d291 Add support for machine events on Windows
Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2022-05-12 14:41:26 -05:00
Daniel J Walsh
8631485051
Merge pull request #14217 from containers/dependabot/go_modules/github.com/opencontainers/runc-1.1.2
build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
2022-05-12 13:36:39 -04:00
Daniel J Walsh
0d8107f71d
Merge pull request #14221 from edsantiago/fix_pwd
Fix broken pwd
2022-05-12 13:36:20 -04:00
Daniel J Walsh
81fc9f1dea
Merge pull request #14159 from vrothberg/service-container
play kube: service container
2022-05-12 13:35:56 -04:00
Ed Santiago
b7ce986195 Fix broken pwd
Broken in #14191, merged unintentionally

Signed-off-by: Ed Santiago <santiago@redhat.com>
2022-05-12 07:53:01 -06:00
OpenShift Merge Robot
45e9f1ff09
Merge pull request #14216 from Luap99/format-completion
shell completion --format: work with pointer functions
2022-05-12 15:32:58 +02:00
OpenShift Merge Robot
e9a114f5a5
Merge pull request #14191 from vrothberg/fix-benchmarks
[CI:DOCS] fix `make localbenchmarks`
2022-05-12 15:12:57 +02:00
dependabot[bot]
1094d7553f
build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.2/CHANGELOG.md)
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.1...v1.1.2)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-12 12:13:04 +00:00
OpenShift Merge Robot
8f21eccc7c
Merge pull request #14211 from giuseppe/vendor-storage-image
vendor: update c/storage and c/image
2022-05-12 07:20:58 -04:00
Paul Holzinger
9df3906553
shell completion --format: work with pointer functions
The completion logic currently suggest also the functions that are
defined for this type. However this did not work correctly when it was
defined as pointer to that type on not the actual type.

This commit fixes that problem. To test you can compare the difference
between `podman stats --format {{.[TAB]` with and without this commit.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-05-12 13:15:56 +02:00
OpenShift Merge Robot
e6d19acee7
Merge pull request #14215 from vrothberg/fix-notify
sdnotify: send MAINPID only once
2022-05-12 07:15:19 -04:00
Valentin Rothberg
03af8213ce sdnotify: send MAINPID only once
Send the main PID only once.  Previously, `(*Container).start()` and
the conmon handler sent them ~simultaneously and went into a race.

I noticed the issue while debugging a WIP PR.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2022-05-12 11:11:37 +02:00
Valentin Rothberg
840c120c21 play kube: service container
Add the notion of a "service container" to play kube.  A service
container is started before the pods in play kube and is (reverse)
linked to them.  The service container is stopped/removed *after*
all pods it is associated with are stopped/removed.

In other words, a service container tracks the entire life cycle
of a service started via `podman play kube`.  This is required to
enable `play kube` in a systemd unit file.

The service container is only used when the `--service-container`
flag is set on the CLI.  This flag has been marked as hidden as it
is not meant to be used outside the context of `play kube`.  It is
further not supported on the remote client.

The wiring with systemd will be done in a later commit.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2022-05-12 10:51:13 +02:00
Valentin Rothberg
ecf0177a01 vendor c/common@main
In hope to fix a CI flake.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2022-05-12 10:51:13 +02:00
OpenShift Merge Robot
f65e13eb7a
Merge pull request #14209 from edsantiago/investigate_bloat_hang
Fix hang in build-each-commit test
2022-05-12 04:24:53 -04:00
OpenShift Merge Robot
1a99a28e47
Merge pull request #14175 from giuseppe/update-toolbox-image
test: update fedora toolbox image
2022-05-12 04:08:41 -04:00
Giuseppe Scrivano
16e22dbbe3
vendor: update c/storage and c/image
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-05-12 03:47:42 +02:00
Ed Santiago
37e30bcb27 Fix hang in build-each-commit test
Followup to #14178: I broke CI. "--fork-point" does not do
what I thought it did, so remove it.

Also, add 'set -x' to help us debug the next time something
like this happens.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2022-05-11 18:45:13 -06:00
OpenShift Merge Robot
1b8e9c2ca7
Merge pull request #14198 from edsantiago/easy_manpage_fixes
[CI:DOCS] man pages: fix inconsistencies
2022-05-11 16:39:03 -04:00
OpenShift Merge Robot
b329ee9c04
Merge pull request #14141 from n1hility/win-docs
[CI:DOCS] Add Windows Guide/Tutorial
2022-05-11 16:37:02 -04:00
Ed Santiago
e76a07087e [CI:DOCS] man pages: fix inconsistencies
As part of work done in #14046, fix bugs found in man pages,
basically just moving a few descriptions to the right place
and removing some undesired asterisks.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2022-05-11 13:14:08 -06:00
Giuseppe Scrivano
60258925a8
test: update fedora toolbox image
f32 is already EOL.  Let's use the latest version.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-05-11 20:44:37 +02:00
Valentin Rothberg
813f6a68fa [CI:DOCS] fix make localbenchmarks
Since `./hack` has been removed from the Makefile's path, add it back
for `make localbenchmarks` to make `podman-registry` binary available
for running local registries.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2022-05-11 13:18:55 +02:00
OpenShift Merge Robot
c379014ee4
Merge pull request #14170 from ashley-cui/machtests
Add more machine tests
2022-05-11 03:03:31 -04:00
OpenShift Merge Robot
ed1ba27f8d
Merge pull request #14176 from giuseppe/test-parallel-rm-cleanup
test: simplify cleanup code
2022-05-11 02:39:57 -04:00
Jason T. Greene
876b05cdb3 Add initial Windows guide
Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2022-05-10 23:30:42 -05:00
Ashley Cui
c7c00ce551 Add more machine tests
Add more machine tests for flags in init, inspect, and list.

Signed-off-by: Ashley Cui <acui@redhat.com>
2022-05-10 14:56:13 -04:00
Giuseppe Scrivano
d0ca90b3ed
test: simplify cleanup code
do not try to first stop and then rm but combine the two operations in
a single command.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-05-10 20:11:16 +02:00
OpenShift Merge Robot
32021ebc70
Merge pull request #14179 from cevich/ensure_dest_branch
Cirrus: Guarantee $DEST_BRANCH is passed through
2022-05-10 13:53:57 -04:00
OpenShift Merge Robot
186d812f64
Merge pull request #14016 from cevich/fix_caching
Cirrus: Simplify use of cache in automation
2022-05-10 13:52:10 -04:00
OpenShift Merge Robot
a09eaa888e
Merge pull request #14180 from cevich/fix_makefile_path
Cirrus: Fix Makefile including 'hack' in $PATH
2022-05-10 13:33:57 -04:00
OpenShift Merge Robot
76dc9ef32d
Merge pull request #14140 from giuseppe/play-kube-userns
kube: add support for --userns=[auto|host]
2022-05-10 13:28:16 -04:00
Giuseppe Scrivano
0774a4ce13
kube: add support for --userns=
add support to override the user namespace to use for the pod.

Closes: https://github.com/containers/podman/issues/7504

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-05-10 16:51:01 +02:00
Chris Evich
2b5778d416
Cirrus: Update images + new automation library
Add support for new automation library version w/ `$DEBUG` fix
(ref: containers/automation_images#128) and added definitions
for commonly used Distro/version variables.

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-05-10 10:49:32 -04:00
Chris Evich
9ffc2a6ac7
Cirrus: Fix Makefile including 'hack' in $PATH
This path should never, ever, ever be included in `$PATH` as it is
almost guaranteed to cause serious and non-obvious breakage in CI.  Fix
it and include a warning comment.

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-05-10 10:49:32 -04:00
Chris Evich
abf4f77bc7
Cirrus: Simplify use of cache in automation
With the increasingly complex `.cirrus.yml` task relationships, build
cache wasn't always working as intended.  Recently, non-build tasks were
observed assuming authority over `gopath_cache`.  Ref.:
https://github.com/containers/podman/pull/13998#issuecomment-1108834538

Address this by an overall simplification using artifacts instead of
cache.  Using artifacts allows establishing concrete
authorship/authority over cached repo. content.  In this way, dependent
tasks may simply consume the artifact with `curl` instead of relying on
complex caching algorithms.

Also/Minor: Add YAML checking to the pre-commit configuration.

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-05-10 10:49:32 -04:00
Chris Evich
237f761262
Cirrus: Simplify rootless ssh setup
The sshd service is guaranteed to be running by the VM image build
process - it's required by the packer tool for access.  Remove the
startup and check on the sshd service.

For many tests, man ssh connections to/from $ROOTLESS_USER on the
host are needed.  To facilitate this, the localhost key is added to
`known_hosts` for root and `$ROOTLESS_USER`.  Simplify this setup using
the `ssh-keyscan` tool.

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-05-10 10:49:32 -04:00
Chris Evich
c1656e2ee5
Cirrus: Guarantee $DEST_BRANCH is passed through
There are several runtime contexts (rootless and container) where
`$DEST_BRANCH` is needed but was not supplied.  A prior commit
(c486576717) removed the default value, `main` which was being
set incorrectly when CI ran on release branches.  Fix this by ensuring
the variable is non-empty upon entry to `setup_environment.sh`, then
ensure it gets passed through to child environments by way of the
`/etc/ci_environment` file.  This will maintain compatibility with
both CI and `hack/get_ci_vm.sh` use.

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-05-10 10:22:01 -04:00
OpenShift Merge Robot
18713f589c
Merge pull request #14178 from edsantiago/bloat_fix
bloat check: make more robust
2022-05-10 10:16:00 -04:00
OpenShift Merge Robot
23826c5063
Merge pull request #14167 from giuseppe/play-kube-honor-pod-security-context
kube: honor pod security context IDs
2022-05-10 10:04:08 -04:00
Ed Santiago
82f2b3edbc bloat check: make more robust
The use of 'C^' (parent) in 'git rebase' is counterintuitive,
at least to me: when C is a merge of multiple commits, rebase
picks each of those commits. That probably makes good sense
to a git expert, which I'm not.

Solution: forget using '^', just calculate the baseline sizes
by doing a checkout of the PR's parent.

Also: compute PR parent using git-merge-base instead of
blindly trusting $DEST_BRANCH (which may be volatile as
other PRs are merged).

Also: run git-rebase directly, not via make rule. That
indirection is too confusing here.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2022-05-10 05:44:55 -06:00
OpenShift Merge Robot
28588235d2
Merge pull request #14147 from ttys3/Container.cGroupPath-Error-parsing-cgroup
fix: Container.cGroupPath() skip empty line to avoid false error logging
2022-05-10 03:43:34 -04:00
Giuseppe Scrivano
9e1ee081f8
kube: honor pod security context IDs
If the RunAsUser, RunAsGroup, SupplementalGroups settings are not
overriden in the container security context, then take the value from
the pod security context.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-05-10 09:09:14 +02:00
Giuseppe Scrivano
82a4b8f01c
kube: refactor setupSecurityContext to accept directly the security ctx
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-05-10 09:09:14 +02:00
ttyS3
be5abf03ab fix: Container.cGroupPath() skip empty line to avoid false error logging
Signed-off-by: ttyS3 <ttys3.rust@gmail.com>

[NO NEW TESTS NEEDED]
2022-05-10 13:47:55 +08:00
OpenShift Merge Robot
21c816bb16
Merge pull request #14158 from edsantiago/test_skip_fix_main
test skipper: check for $DEST_BRANCH
2022-05-09 20:29:20 -04:00
Ed Santiago
c486576717 test skipper: check for $DEST_BRANCH
The test-skipping optimization is failing as rootless on non-main,
because $DEST_BRANCH is not set. Solution: check for envariable,
skip test if missing. (This was part of my original PR, but was
accidentally removed in #14013)

Also: DEST_BRANCH was silently being defaulted to 'main' in lib.sh.
Remove that: per @cevich, it is no longer necessary.

Fixes: #14131

Signed-off-by: Ed Santiago <santiago@redhat.com>
2022-05-09 13:14:25 -06:00