7852 commits

Author	SHA1	Message	Date
Paul Holzinger	956e77bc39	Merge pull request #29316 from podman-container-tools/renovate/github.com-go-swagger-go-swagger-0.x ... Update module github.com/go-swagger/go-swagger to v0.35.3	2026-07-29 11:30:19 +02:00
Tushar Verma	505dfc2e1b	test/system: drop the conmon pid debugging ... The echo and ls were added to help debug #7580, which was closed in November 2020. The readlink check right below them is the actual assertion and it prints the pid on failure anyway. Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-07-28 23:34:09 +05:30
Tushar Verma	75c07f5949	test/system: drop the metacopy instrumentation ... The comment asks for this to be removed once #15488 is fixed. That was closed in December 2022. I grepped four recent system test job logs and the warning does not appear in any of them. It sits in run_podman so it ran on every podman call, and it writes to fd 3 which means the output shows up even when the test passes. Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-07-28 23:34:09 +05:30
renovate[bot]	64cad97fe3	Update module github.com/go-swagger/go-swagger to v0.35.3 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-28 09:38:19 +00:00
Danish Prakash	e31bb4d170	Merge pull request #29306 from vtushar06/fix-rfc1918-subnet ... test/system: fix random_rfc1918_subnet operator precedence	2026-07-28 09:38:21 +05:30
Tushar Verma	7880bc24b2	test/system: fix random_rfc1918_subnet operator precedence ... In bash arithmetic + binds tighter than &, so 16 + $RANDOM & 15 is (16 + RANDOM) & 15, which gives 0..15. The helper has been handing out 172.0.x through 172.15.x, which is not in 172.16/12 at all, since 9e3363c5e swapped % 16 for & 15. subnet_in_use() only checks whether a subnet collides with a host route, not whether it is private, so nothing caught it. Add a regression test to helpers.t. It fails on the old expression (saw 0..15) and passes on the new one (saw 16..31). Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-07-27 14:42:50 +05:30
Satwik Sai Prakash Sahoo	6d057f585a	test: fix cgroups=split flake by adding Delegate=yes to scope ... The cgroups=split e2e test wraps podman in systemd-run --scope but does not request cgroup delegation. Without Delegate=yes, systemd does not guarantee that controllers like pids are written to cgroup.subtree_control for child cgroups. Whether they appear depends on the systemd session state at that moment, causing flaky crun failures when it tries to use unavailable controllers. Fixes: #28944 Signed-off-by: Satwik Sai Prakash Sahoo <sahoospsatwik@gmail.com>	2026-07-26 12:44:16 +05:30
Paul Holzinger	e36e1a41c6	Merge pull request #28809 from podman-container-tools/renovate/github.com-go-swagger-go-swagger-0.x ... Update module github.com/go-swagger/go-swagger to v0.35.0	2026-07-24 17:58:43 +02:00
Paul Holzinger	cc8c07d72b	Merge pull request #29230 from i-OmSharma/fix-kube-generate-selinux-note ... fix(kube): gate SELinux volume warning note on host SELinux state	2026-07-24 14:07:32 +02:00
Tom Sweeney	0f5cd32096	Merge pull request #29260 from jiwahn/fix-init-failure-rollback ... libpod: cleanup after failed container init	2026-07-23 11:31:09 -04:00
Jiwoo Ahn	f85047302c	libpod: cleanup after failed container init ... Fixes: #26143 Signed-off-by: Jiwoo Ahn <ikwydls1314@gmail.com>	2026-07-23 22:42:14 +09:00
Danish Prakash	f4b1f46cd6	Merge pull request #29254 from Honny1/rm-duplicate-test ... Remove duplicate memAvailable sanity check	2026-07-23 13:55:01 +05:30
Danish Prakash	94a98b18cb	Merge pull request #29033 from mvanhorn/docs/28947-document-hack-ci-lima ... docs: document hack/ci/ci.sh lima workflow in test/README.md	2026-07-23 09:22:10 +05:30
Matt Van Horn	ad09a77141	docs(test): document hack/ci/ci.sh lima workflow ... Add a copy-paste-friendly section to test/README.md covering how to run the hack/ci/ci.sh workflow under Lima, including templatized ci.sh usage, so contributors can reproduce the CI environment locally. Drop the contradictory machine bullet. Fixes #28947 Signed-off-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>	2026-07-22 16:03:48 -07:00
Jan Rodák	832d3ea247	Remove duplicate memAvailable sanity check ... Already covered by test/e2e/info_test.go. Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-07-22 13:30:50 +02:00
Paul Holzinger	d79cff0799	test/e2e: do not assume /etc/containers/policy.json ... With the new config work we expect policy.json to be shipped under /usr/share/containers/policy.json. However the CI VMs and local users might still have it in /etc so instead of assuming any host path lets just create our own files for the --signature-policy tests. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-22 12:40:02 +02:00
i-OmSharma	cfd3a3f7ba	kube generate: gate SELinux volume NOTE on host state and rootless ... The SELinux volume-permissions NOTE only applies to unprivileged, rootless containers on an SELinux-enabled host. Emit it only when both conditions hold, instead of on every volume-bearing object. Add an e2e case generating from a standalone container with a volume, asserting the NOTE appears only when rootless and SELinux is enabled. Fixes: #17743 Signed-off-by: i-OmSharma <sharmaom1201@gmail.com>	2026-07-22 14:21:01 +05:30
Jan Rodák	c0fb461475	Merge pull request #29237 from gastoner/add-memavailable-support ... feat(info): add memAvailable to host info	2026-07-22 10:15:52 +02:00
Evzen Gasta	a19b696de1	feat(info): add memAvailable to host info ... Expose MemAvailable alongside MemFree/MemTotal in `podman info` host section, sourced from libpod/define/info.go's MemInfo. Fixes: #29116 https://github.com/podman-container-tools/podman/issues/29116 Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Signed-off-by: Evzen Gasta <evzen.ml@seznam.cz> test(info): add coverage for host.memAvailable Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com> Signed-off-by: Evzen Gasta <evzen.ml@seznam.cz>	2026-07-22 08:41:59 +02:00
Jan Rodák	f2ad52c492	Merge pull request #28713 from simek-m/test/api-chunked-pullprogress ... test: Add API test for partial pull with pullProgress flag	2026-07-21 16:24:50 +02:00
zjuzhongwen	2c8a7acbeb	chore: fix some comments to improve readability ... Signed-off-by: zjuzhongwen <zjuzhongwen@outlook.com>	2026-07-19 22:18:33 +08:00
Danish Prakash	41a8ccf5a3	Merge pull request #29209 from Prachi-Gupta2808/fix-28940-nproc-ulimit-flake ... test system: increase nproc ulimit value to avoid flake	2026-07-17 15:39:47 +05:30
Prachi Gupta	74d18c7572	test system: increase nproc ulimit to avoid flake ... RLIMIT_NPROC is enforced per user namespace, not per container. On remote with rootless, leaked conmon exec-session processes (which sleep ~300s) can push the process count in the shared user namespace high enough that a low nproc ulimit like 512 causes crun to fail with 'clone: Resource temporarily unavailable'. Bump the test value to 10000, with a comment explaining why, so it isn't quietly lowered again. Verified locally with: hack/bats --rootless 280:"podman update - set ulimits" Fixes: #28940 Signed-off-by: Prachi Gupta <prachig2808@gmail.com>	2026-07-17 03:44:48 +00:00
Giuseppe Scrivano	760ce081a6	Merge pull request #29192 from Luap99/flakes ... three flakes fixes for system tests	2026-07-15 13:42:21 +02:00
Jan Rodák	bb4695870e	Merge pull request #28984 from stefan8/test/apiv2-manifest-create-images-query ... test: add apiv2 coverage for the manifest-create images query param	2026-07-15 13:10:40 +02:00
renovate[bot]	a5c92c6130	Update module github.com/go-swagger/go-swagger to v0.35.0 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-15 10:58:17 +00:00
Paul Holzinger	389ae02e8e	Merge pull request #29185 from podman-container-tools/renovate/docker-7.x ... Update dependency docker to ~=7.2.0	2026-07-14 15:10:53 +02:00
Paul Holzinger	00072def84	test/system: fix broken port bound check logic ... We only checked for "*" which means all addresses are bound, but that is only used for dual stack sockets, for ipv4 only we need to check 0.0.0.0 and for ipv6 [::] as well so do that. This should fix a common flake in the pasta tests which fail to bind 5355 as it is in use by systemd-resolved. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-14 14:16:00 +02:00
Paul Holzinger	ab41b5d316	test/system: fix "podman rm running container, w/o and w/ force" flake ... Since this runs in parallel there might be a 5s or longer delay between the run and rm command, as seen in this test log: not ok 102 |055| podman rm - running container, w/o and w/ force in 9758ms [13:31:24.753064270] # /var/tmp/podman/bin/podman-remote ... run -d quay.io/libpod/testimage:20241011 sleep 5 [13:31:26.113551343] 6ec4b494cbda820a7bcb31fa7f7a2f9b36000e950477434eaedd0bb3c73f9e00 [13:31:26.120952012] # /var/tmp/podman/bin/podman-remote ... rm 6ec4b494cbda820a7bcb31fa7f7a2f9b36000e950477434eaedd0bb3c73f9e00 [13:31:32.235939009] 6ec4b494cbda820a7bcb31fa7f7a2f9b36000e950477434eaedd0bb3c73f9e00 FAIL: exit code is 0; expected 2 Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-14 14:16:00 +02:00
Danish Prakash	5561e6c416	Merge pull request #29168 from Honny1/fix-json-format ... Fix inspect template `.HostIp` for Docker compatibility	2026-07-14 13:38:30 +05:30
renovate[bot]	6fa8cc3bd6	Update dependency docker to ~=7.2.0 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-13 17:13:06 +00:00
Jan Rodák	030b0be9d8	Add HostIp() method to InspectHostPort for Docker template compat ... Docker-compatible inspect templates using `{{.HostIp}}` fail in Podman because Go templates resolve by struct field name (`HostIP`), not JSON tag (`HostIp`). Add a `HostIp()` method so both notations work. Note: this does not address the struct-vs-map difference that prevents `range` over individual port bindings (would require an API break). Relates: https://github.com/podman-container-tools/podman/issues/29164 Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-07-13 16:08:11 +02:00
Paul Holzinger	24cb833216	Merge pull request #29143 from podman-container-tools/renovate/go-golang.org-x-crypto-vulnerability ... Update module golang.org/x/crypto to v0.52.0 [SECURITY]	2026-07-13 15:17:47 +02:00
Jan Rodák	7ac3e83707	Fix duplicated command in inspect Args when container has single-element command ... Fixes: https://github.com/podman-container-tools/podman/issues/29155 Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-07-09 17:31:21 +02:00
Marek Simek	612c7b71b4	api: Deprecate response fields from GET /containers/{id}/json ... The Docker API 1.44 deprecates the fields HairpinMode, LinkLocalIPv6Address, LinkLocalIPv6PrefixLen, SecondaryIPAddresses, SecondaryIPv6Addresses available in NetworkSettings when calling GET /containers/{id}/json and will be removed in a future release. You should instead look for the default network in NetworkSettings.Networks. The fields are removed in 1.52. Version gate SecondaryIPAddresses, SecondaryIPv6Addresses in the handler and update test. HairpinMode, LinkLocalIPv6Address, LinkLocalIPv6PrefixLen are not returned by the compat endpoint as the response is serialized to the moby/moby/api structure missing these fields. Fixes: https://redhat.atlassian.net/browse/RUN-3323 Signed-off-by: Marek Simek <msimek@redhat.com>	2026-07-08 17:31:02 +02:00
Marek Simek	f4925bae8c	api: Deprecate is-automated filter and field in GET /images/search endpoint ... The Docker API in version 1.44 deprecates the is_automated field for the GET /images/search endpoint. The is_automated field has been deprecated by Docker Hub's search API. Consequently, searching for is-automated=true will yield no results. The Docker API in version 1.44 deprecates the is_automated field in the GET /images/search response and will always be set to false in the future because Docker Hub is deprecating the is_automated field in its search API. Return struct moby/api for the compat endpoint that matches the Docker API response format and deprecates is_automated. Update test_v2_0_0_image.py::ImageTestCase::test_search_compat to verify returned format and fix subtests not being asserted (remove mp). Fixes: https://redhat.atlassian.net/browse/RUN-3323 Signed-off-by: Marek Simek <msimek@redhat.com>	2026-07-08 17:31:02 +02:00
renovate[bot]	95927679b2	Update module golang.org/x/crypto to v0.52.0 [SECURITY] ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-08 10:19:57 +00:00
Jan Rodák	c3d7201764	Mark pasta forwarder tests as non-parallel ... Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-07-07 17:56:14 +02:00
Jan Rodák	e4271bea59	Enable pasta forwarder tests after passt SELinux fix ... Fixes: https://github.com/podman-container-tools/podman/issues/28776 Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-07-07 13:40:44 +02:00
renovate[bot]	1e8f069cda	Update dependency setuptools to v83 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-04 16:42:12 +00:00
Paul Holzinger	0ead98d2d4	Merge pull request #29092 from ROKUMATE/feat-playkube-container-name ... pkg/domain: include container name in kube play start errors	2026-07-03 13:25:18 +02:00
ROKUMATE	8748e6c9ac	pkg/domain: include container name in kube play start errors ... Fixes: #27196 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-07-03 15:07:41 +05:30
Paul Holzinger	a9a332116d	Merge pull request #29104 from podman-container-tools/renovate/go-golang.org-x-net-vulnerability ... Update module golang.org/x/net to v0.55.0 [SECURITY]	2026-07-02 19:20:50 +02:00
Jan Rodák	e852389e55	Merge pull request #29071 from Luap99/scannererr ... fix missing error checks for bufio.Scanner	2026-07-02 14:55:12 +02:00
renovate[bot]	9ccc0490a7	Update module golang.org/x/net to v0.55.0 [SECURITY] ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-02 12:39:14 +00:00
Giuseppe Scrivano	6c5efd31e3	Merge pull request #29011 from simonbrauner/issue-29004 ... Write quadlet units to temporary files and rename	2026-07-02 09:34:30 +02:00
Jan Rodák	63cf53d26a	Merge pull request #29083 from Luap99/oci-log ... podman log-level debug must produce the same oci runtime errors	2026-07-01 16:34:39 +02:00
Marek Simek	af6d76481f	test/apiv2: Log correct port in start/stop_registry ... Signed-off-by: Marek Simek <msimek@redhat.com>	2026-07-01 14:55:55 +02:00
Marek Simek	4cb705bfe9	test: Add API test for partial pull with pullProgress flag ... Progress reporting in container-libs/image did not update the progress channel for chunked layers. Add test that builds a new image with chunked layers, pull it using the REST API and verify that the progress stream contains events for partial pulls too. Depends-on: https://github.com/containers/container-libs/issues/469 Signed-off-by: Marek Simek <msimek@redhat.com>	2026-07-01 14:55:55 +02:00
Jan Rodák	2eae23c851	Merge pull request #29039 from Luap99/swagger-doc ... docs: update API Reference docs	2026-06-30 17:23:01 +02:00