Commit graph

14190 commits

Author SHA1 Message Date
Jhon Honce
71d1514490 Add version guard to libpod API endpoints
* Ensure meaningful behaviour when called with /v3.x.x semantics
* Change return code to 409 from 500 when client attempts to use an
  existing network name
* Update API bats test runner to support /v4.0.0 endpoints by default

Signed-off-by: Jhon Honce <jhonce@redhat.com>
2022-02-09 14:38:51 -07:00
OpenShift Merge Robot
5b2d96fc29
Merge pull request #13177 from rhatdan/v4.0
[4.0] idmap should be able to be specified along with other options
2022-02-09 14:53:52 -05:00
Daniel J Walsh
7499496f3d
idmap should be able to be specified along with other options
[NO NEW TESTS NEEDED] crun is not available everywhere to test idmap.
Kernel might not be recent enough and not all file systems support
idmap option.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-09 07:14:53 -05:00
OpenShift Merge Robot
2dca7b25d8
Merge pull request #13137 from rhatdan/v4.0
Update containers/buildah v1.24.1
2022-02-04 12:11:12 -05:00
Daniel J Walsh
e47a3bec91
Vendor in containers/buildah v1.24.1
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-04 09:44:39 -05:00
OpenShift Merge Robot
4ad9e0030b
Merge pull request #13133 from mheon/bump_400_rc4
Bump to v4.0.0-RC4
2022-02-04 09:14:15 -05:00
Matthew Heon
cad3eb78b4 Bump to v4.0.0-dev
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2022-02-03 16:21:26 -05:00
Matthew Heon
0c9648136f Bump to v4.0.0-RC4
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2022-02-03 16:21:26 -05:00
Matthew Heon
c1618042fd Disable failing E2E test
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2022-02-03 16:21:26 -05:00
Paul Holzinger
70623790d0 Revert "Move each search dns to its own line"
This reverts commit a1bc8cb52c.
Please see resolv.conf(5) search domains must be on the same line. If
you use multiple seach key words only the last one is used. I tested this
with alpine and it works correctly when they are on the same line so I
am not sure what issues Dan had with it but this is not correct.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-02-03 16:21:26 -05:00
Daniel J Walsh
48f10e1d0d Move each search dns to its own line
Alpine does not seem to use search correctly when there are multiple
search domains on the same line. It only uses the first with the advent.
When podman runs within a separate network we are appending on
dns.podman as a search, if you add a search domain, then this causes the
local search on network to fail.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-03 16:21:26 -05:00
Matthew Heon
938d5152ca Update release notes for v4.0.0-RC4
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2022-02-03 16:21:26 -05:00
Nalin Dahyabhai
99968002fb Document schema values in the --url flag
Document the recognized `schema` types that can be used in a value
passed to the `--url` command line flag.

[CI:DOCS]

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-02-03 15:02:53 -05:00
cdoern
6d747dca22 podman image scp syntax correction
[NO NEW TESTS NEEDED] image scp was reading the localhost syntax too loosely causing some errors with domains or hosts containing the word
localhost. Fixed that and added a few lines to make sure the pure localhost connections do not touch sshd

resolves #13021

Signed-off-by: cdoern <cdoern@redhat.com>
2022-02-03 15:02:39 -05:00
Paul Holzinger
e0cbcdc335 system prune: remove all networks
podman system prune should also remove all networks. When we want to
users to migrate to the new network stack we recommend to run podman
system reset. However this did not remove networks and if there were
still networks around we would continue to use cni since this was
considered an old system.

There is one exception for the default network. It should not be removed
since this could cause other issues when it no longer exists. The
network backend detection logic ignores the default network so this is
fine.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-02-03 15:01:29 -05:00
Daniel J Walsh
8f3f0710ff Only change network fields if they were actually changed by the user
Fixes: https://github.com/containers/podman/issues/13065

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-03 14:59:27 -05:00
Giuseppe Scrivano
fb6fca806d docs: clarify rootless net stats
follow-up for https://github.com/containers/podman/pull/13101

[CI:DOCS]

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-02-03 14:58:34 -05:00
Daniel J Walsh
cad6459b68 Fix size to match Docker selection
Fixes: https://github.com/containers/podman/issues/13096

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-03 14:54:29 -05:00
Giuseppe Scrivano
06821627fb libpod: enforce noexec,nosuid,nodev for /dev/shm
these mount flags are already used for the /dev/shm mount on the host,
but they are not set for the bind mount itself.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-02-03 14:50:04 -05:00
Daniel J Walsh
44cd232bef Clarify remote client means Mac and Windows
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-03 14:49:32 -05:00
Giuseppe Scrivano
9d3bcb5875 libpod: report slirp4netns network stats
by default slirp4netns uses the tap0 device.  When slirp4netns is
used, use that device by default instead of eth0.

Closes: https://github.com/containers/podman/issues/11695

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-02-03 14:46:01 -05:00
Tsubasa Watanabe
f65b62c987 Add notes to "--oom-kill-disable" not supported on cgroups V2
Clarify "--oom-kill-disable" is not supported on cgroups V2 in
documentation.

Signed-off-by: Tsubasa Watanabe <w.tsubasa@fujitsu.com>
2022-02-03 14:45:45 -05:00
Daniel J Walsh
178cccbf9e Fix use of infra image to clarify default
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-03 14:45:29 -05:00
Patrycja Guzik
97c8bdfebe Adapt podman images ls filters docs to be aligned with prune filters docs
Signed-off-by: Patrycja Guzik <patrycja.k.guzik@gmail.com>
2022-02-03 14:45:02 -05:00
Aditya R
49076ba871 ignition, machine: delegate cpu,io cgroup controllers to machine's default users
Makes sure that ignition setups up systemd config so cgroup controllers
like `cpu, io` are also delegated to `non-root` along with `memory,
pid`.

This allows general users of `podman` on `macOS` and `podman-remote` to
do operations which are dependent on `cpu, io` cgroup controllers.

[NO TESTS NEEDED]
[NO NEW TESTS NEEDED]
We don't have a CI infra to test this, please pull the tree and run
`podman info` inside the machine to confirm.

Signed-off-by: Aditya R <arajan@redhat.com>
2022-02-03 14:43:28 -05:00
OpenShift Merge Robot
337f706f61
Merge pull request #13130 from nalind/slashify-dockerfile-4.0
[v4.0] pkg/bindings/images.Build(): slashify "dockerfile" values, too
2022-02-03 13:15:17 -05:00
Nalin Dahyabhai
0c9a8ac073 pkg/bindings/images.Build(): slashify "dockerfile" values, too
When the Dockerfile isn't in the root directory of the build context,
the client supplies its pathname to the server, but it needs to do so
using "/" as the path separator, not the client OS's path separator.

CI can't test Windows clients, so
[NO NEW TESTS NEEDED]

Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-02-03 11:36:15 -05:00
OpenShift Merge Robot
18348c0b69
Merge pull request #13068 from mheon/bump_400_rc3
[CI:DOCS] Bump to v4.0.0-RC3
2022-01-28 14:10:09 -05:00
Matthew Heon
3b565bacf1 Remove mention of IPv6 portfwd from release notes
Signed-off-by: Matthew Heon <mheon@redhat.com>
2022-01-28 12:30:08 -05:00
Matthew Heon
10a966a2a0 Bump to v4.0.0-dev
Signed-off-by: Matthew Heon <mheon@redhat.com>
2022-01-28 10:45:59 -05:00
Matthew Heon
9b441c0dda Bump to v4.0.0-RC3
Signed-off-by: Matthew Heon <mheon@redhat.com>
2022-01-28 10:45:32 -05:00
Matthew Heon
f5dfe026d1 Update release notes for v4.0.0-RC3
Signed-off-by: Matthew Heon <mheon@redhat.com>
2022-01-28 10:45:03 -05:00
OpenShift Merge Robot
7781dd7316
Merge pull request #13067 from mheon/fix_ci_40
Fix Cirrus destination branch
2022-01-28 10:44:09 -05:00
Matthew Heon
ebf5ad50eb Fix Cirrus destination branch
Signed-off-by: Matthew Heon <mheon@redhat.com>
2022-01-28 09:23:29 -05:00
OpenShift Merge Robot
1b544b7424
Merge pull request #12712 from flouthoc/volume_overlay_advanced
volume: add support for non-volatile `upperdir`,`workdir` for overlay volumes
2022-01-28 07:06:02 -05:00
OpenShift Merge Robot
f9d2f99653
Merge pull request #13048 from cevich/fix_get_ci_vm
[CI:DOCS] Cirrus: Fix get_ci_vm.sh initial setup
2022-01-28 06:44:04 -05:00
OpenShift Merge Robot
935ae1bfd0
Merge pull request #13052 from Luap99/issues2
[CI:DOCS] github: label issues based on os fix regex
2022-01-28 03:16:04 -05:00
Aditya Rajan
e64e6500d3
volume: add support for non-volatile upperdir,workdir for overlay volumes
Often users want their overlayed volumes to be `non-volatile` in nature
that means that same `upper` dir can be re-used by one or more
containers but overall of nature of volumes still have to be `overlay`
so work done is still on a overlay not on the actual volume.

Following PR adds support for more advanced options i.e custom `workdir`
and `upperdir` for overlayed volumes. So that users can re-use `workdir`
and `upperdir` across new containers as well.

Usage
```console

$ podman run -it -v myvol:/data:O,upperdir=/path/persistant/upper,workdir=/path/persistant/work alpine sh

```

Signed-off-by: Aditya R <arajan@redhat.com>
2022-01-28 13:10:15 +05:30
Paul Holzinger
a928d39d0c github: label issues based on os fix regex
Good news the github action works, however I noticed that we cannot use
a multiline regex so we have to use serviceIsRemote to detect if this is
a remote client. Also change the os regex so that it matches both the
output of podman version and podman info.

Signed-off-by: Paul Holzinger <paul.holzinger@web.de>
2022-01-27 21:24:34 +01:00
OpenShift Merge Robot
fae7648ba1
Merge pull request #13050 from Luap99/issues
[CI:DOCS] github: label issues based on os
2022-01-27 13:54:51 -05:00
Daniel J Walsh
908329c390
Merge pull request #13049 from edsantiago/bats
System tests: emergency skip of checkpoint tests
2022-01-27 13:20:41 -05:00
OpenShift Merge Robot
bedbc3e6fc
Merge pull request #13042 from Luap99/subnets
network create: allow multiple subnets
2022-01-27 12:16:50 -05:00
Paul Holzinger
525bdc3771
github: label issues based on os
We get a lot of issues for podman-remote on macos. Since the fact that
this is a remote client is often overlooked by us lets add windows, macos
and remote label automatically based on a regex which should match the
output of podman version.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-01-27 17:51:35 +01:00
Chris Evich
4c26a3a5cd
Cirrus: Fix get_ci_vm.sh initial setup
Due to some recent changes in the Makefile, the setup part of the script
is now breaking with the error:

```
install: cannot stat 'bin/rootlessport': No such file or directory
make: *** [Makefile:767: install.bin] Error 1
```

The root-cause seems to be the `install` targets not
properly specifying their build dependencies.  This may lead to other
problems WRT automation, but for now I'm just patching this tool to
workaround the issue.

Signed-off-by: Chris Evich <cevich@redhat.com>
2022-01-27 11:36:48 -05:00
Ed Santiago
d455bb879d System tests: emergency skip of checkpoint tests
...on kernel 5.17, because it's broken

Signed-off-by: Ed Santiago <santiago@redhat.com>
2022-01-27 09:18:06 -07:00
Paul Holzinger
6961d91206
network create: allow multiple subnets
podman network create --subnet, --gateway and --ip-range can now be
specified multiple times to join the network to more than one subnet.
This is very useful if you want to use a dual stack network and assign a
fixed ipv4 and ipv6 subnet. The order of the options is important here,
the first --gateway/--ip-range will be assigned to the first subnet and
so on.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-01-27 16:38:39 +01:00
OpenShift Merge Robot
5d6b5a0355
Merge pull request #13035 from rhatdan/docs1
CI:DOCS: Add troublshooting info on podman machine remove followed by podman machine init
2022-01-27 09:44:50 -05:00
OpenShift Merge Robot
9e7e91c13e
Merge pull request #13034 from rhatdan/docs
CI:DOCS: Unify podman prune filter description: volumes, networks, system
2022-01-27 09:42:50 -05:00
OpenShift Merge Robot
5b01dab618
Merge pull request #13029 from TomSweeneyRedHat/dev/tsweeney/mergepull2
Bump Buildah to v1.24.0
2022-01-27 08:38:52 -05:00
OpenShift Merge Robot
5659b0734c
Merge pull request #12867 from cdoern/scp
switch podman image scp from depending on machinectl to just os/exec
2022-01-27 07:48:50 -05:00