27918 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Miloslav Trmač	a4f3db7fbb	Merge pull request #29235 from Luap99/lock-reuse ... .github/workflows/issue_pr_lock.yml: run for the full org	2026-07-21 16:16:11 +02:00
Jan Rodák	af62a661a9	Merge pull request #29234 from podman-container-tools/renovate/github.com-opencontainers-cgroups-0.x ... Update module github.com/opencontainers/cgroups to v0.0.8	2026-07-21 15:58:33 +02:00
Paul Holzinger	901c842b50	Merge pull request #29236 from podman-container-tools/renovate/actions-labeler-7.x ... Update actions/labeler action to v7	2026-07-21 12:52:27 +02:00
renovate[bot]	923a3950ee	Update actions/labeler action to v7 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-21 09:35:32 +00:00
Paul Holzinger	589b0b2142	Merge pull request #29225 from podman-container-tools/renovate/actions-checkout-7.x ... Update actions/checkout action to v7.0.1	2026-07-21 11:34:42 +02:00
Paul Holzinger	357519e364	.github/workflows/issue_pr_lock.yml: run for the full org ... This workflow is used and called by buildah and skopeo, however due this new if it will just get skipped there as the context on a action reuse will still be set to the proper repo which calls the action. The point of this new if from commit 32f987fc8c ("ci: restrict specific workflows to the upstream repository") was to avoid running our actions on forks where they will fail due to missing secrets, etc... So by limiting the scope to our org here we can reuse it from buildah and skopeo and still prevent it running on forks from users. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-21 11:18:51 +02:00
renovate[bot]	ae2c27eb07	Update module github.com/opencontainers/cgroups to v0.0.8 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-21 08:50:26 +00:00
Paul Holzinger	5defedb11a	Merge pull request #29231 from Honny1/update-opt-isolate-docs ... docs: clarify network create isolate option	2026-07-21 10:48:54 +02:00
Tom Sweeney	19ae1d4861	Merge pull request #29221 from Luap99/cron ... .github/workflows: do not run cron jobs at midnight	2026-07-20 17:20:05 -04:00
Jan Rodák	a0da2d92d4	docs: clarify network create isolate option ... Fixes: https://github.com/podman-container-tools/podman/issues/29162 Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-07-20 21:40:44 +02:00
renovate[bot]	cb27f01d48	Update actions/checkout action to v7.0.1 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-20 16:39:57 +00:00
Lokesh Mandvekar	1c3374e388	Merge pull request #29218 from zjuzhongwen/main ... chore: fix some comments to improve readability	2026-07-20 10:57:40 -04:00
Paul Holzinger	d6b9c0b6ad	.github/workflows: do not run cron jobs at midnight ... As documented on github running jobs at the top of the hour and I guess especially at midnight has the chance to get dropped as to many jobs are started around that time for the github workers to handle. I observed that happening today: "No server is currently available to service your request." https://github.com/podman-container-tools/podman/actions/runs/29709422226 So to fix that just move our cron time to some under "random" time during the night. https://docs.github.com/en/actions/reference/workflows-and-actions/events-that-trigger-workflows#schedule Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-20 14:20:08 +02:00
Paul Holzinger	1f94d50d46	Merge pull request #29217 from podman-container-tools/renovate/github.com-vbauerster-mpb-v8-8.x ... Update module github.com/vbauerster/mpb/v8 to v8.13.0	2026-07-20 10:35:43 +02:00
Paul Holzinger	a66b401179	Merge pull request #29215 from podman-container-tools/renovate/common-image-and-storage-deps ... Update common, image, and storage deps to b3642f3	2026-07-20 10:34:06 +02:00
Jan Rodák	75afb1d08f	Merge pull request #29207 from Luap99/check-ci-yaml ... ci: add missing job timeouts and some more basic validation	2026-07-20 08:50:47 +02:00
zjuzhongwen	2c8a7acbeb	chore: fix some comments to improve readability ... Signed-off-by: zjuzhongwen <zjuzhongwen@outlook.com>	2026-07-19 22:18:33 +08:00
renovate[bot]	a6d24e55ae	Update module github.com/vbauerster/mpb/v8 to v8.13.0 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-19 14:16:07 +00:00
renovate[bot]	aa6086ceb0	Update common, image, and storage deps to b3642f3 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-19 01:57:22 +00:00
Paul Holzinger	ecf88ebdb3	Merge pull request #29169 from l0rd/fix-update-path-in-machine-scope-win-installer ... Fix Windows installer machine scope PATH update	2026-07-17 18:21:00 +02:00
Paul Holzinger	ea792b3cb6	remove hack/get_ci_vm.sh ... This was used in the old cirrus workflow we no longer use, the new hack/ci/ci.sh replaces its purpose and doe snot depend on an external cloud so all contributors can use it. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-17 18:06:25 +02:00
Paul Holzinger	be85401b8f	hack/ci/ci_yaml_test.py: add test for job timeouts ... All jobs should have a timeout set as the default from github is not reasonable with 6 hours. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-17 18:06:25 +02:00
Paul Holzinger	5ae652ab9e	ci.yml: add timeout-minutes to all jobs ... Some jobs had no timeout set, add reasonable timeouts for the jobs. This is needed because the github default it a timeout of 6 hours which is just not sane and in case a job ever hangs will waste a lot of resources. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-17 18:05:29 +02:00
Paul Holzinger	5db2203255	hack/ci/ci_yaml_test.py: simplify and add digest check ... Update the file after the updates I did in container-libs for it based on the review from Miloslav there. It will check that we use pinned actions with a version comment so renovate can update it. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-17 18:05:28 +02:00
Mario Loriedo	cee109e255	Windows installer: remove unused IS_UPGRADE property ... This is a followup after @lstocchi comment: https://github.com/podman-container-tools/podman/pull/29169#discussion_r3588942348 The property `IS_UPGRADE` isn't set and was a leftover of the legacy windows installer. Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-07-17 16:32:18 +02:00
Danish Prakash	41a8ccf5a3	Merge pull request #29209 from Prachi-Gupta2808/fix-28940-nproc-ulimit-flake ... test system: increase nproc ulimit value to avoid flake	2026-07-17 15:39:47 +05:30
Paul Holzinger	c7444c9d5a	Merge pull request #29115 from l0rd/wsl-host-containers-internal-test ... Add a machine e2e test to test connection to `host.containers.internal`	2026-07-17 11:52:20 +02:00
Prachi Gupta	74d18c7572	test system: increase nproc ulimit to avoid flake ... RLIMIT_NPROC is enforced per user namespace, not per container. On remote with rootless, leaked conmon exec-session processes (which sleep ~300s) can push the process count in the shared user namespace high enough that a low nproc ulimit like 512 causes crun to fail with 'clone: Resource temporarily unavailable'. Bump the test value to 10000, with a comment explaining why, so it isn't quietly lowered again. Verified locally with: hack/bats --rootless 280:"podman update - set ulimits" Fixes: #28940 Signed-off-by: Prachi Gupta <prachig2808@gmail.com>	2026-07-17 03:44:48 +00:00
Ashley Cui	10dfe12107	Merge pull request #29197 from Luap99/remove-cert-generator ... remove first_contrib_cert_generator.yml	2026-07-16 15:35:08 -04:00
Jait Jacob	2ad3a79631	Add podman machine restart subcommand ... Signed-off-by: Jait Jacob <jai8.jacob@gmail.com>	2026-07-16 21:51:11 +05:30
Mario Loriedo	a572711c84	Fix Windows installer machine scope PATH update ... Update Podman Windows installer to update the PATH for all users if executed in machine scope mode. Added a new test that checks if Podman installation folder is in PATH. Fixes #29160 Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-07-16 17:56:01 +02:00
Giuseppe Scrivano	72da6a0a87	Merge pull request #29079 from mvanhorn/fix-quadlet-verify-stderr-logging ... fix: quadlet generator emits diagnostics to stderr under systemd-analyze verify	2026-07-16 14:38:39 +02:00
Mario Loriedo	452c40a1b6	Add machine e2e test for host.containers.internal ... Add one more test to the basic podman commands e2e tests: - starts an HTTP server on the host - verify HTTP requests from a container, using `host.containers.internal` or `host.docker.internal`, are routed successfully to the server running on the host Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com> test Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-07-16 14:33:18 +02:00
Jan Rodák	213a53cd47	Merge pull request #29204 from podman-container-tools/renovate/actions-setup-go-7.x ... Update actions/setup-go action to v7	2026-07-16 13:31:45 +02:00
Paul Holzinger	f53c099f64	Merge pull request #29202 from podman-container-tools/renovate/zizmorcore-zizmor-action-0.x ... Update zizmorcore/zizmor-action action to v0.6.0	2026-07-16 10:53:52 +02:00
Paul Holzinger	bdf953bb63	Merge pull request #29203 from podman-container-tools/renovate/google.golang.org-grpc-1.x ... Update module google.golang.org/grpc to v1.82.1	2026-07-16 10:52:47 +02:00
renovate[bot]	6b1b1080a1	Update actions/setup-go action to v7 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-16 04:55:56 +00:00
mvanhorn	6d57281d6a	quadlet: explicitly discard logToKmsg return in Logf ... Logf now always writes to stderr, so the kmsg write is best-effort and its bool return is intentionally ignored. Make the discard explicit with `_ = logToKmsg(line)` per review, rather than leaving it implicit. Signed-off-by: mvanhorn <mvanhorn@gmail.com>	2026-07-15 20:04:22 -07:00
renovate[bot]	33aac8d41a	Update module google.golang.org/grpc to v1.82.1 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-16 01:56:01 +00:00
renovate[bot]	ab2a41ceff	Update zizmorcore/zizmor-action action to v0.6.0 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-15 17:05:43 +00:00
Giuseppe Scrivano	e19275f788	Merge pull request #29198 from Luap99/lock-action ... issue_pr_lock.yml: use client id	2026-07-15 13:42:59 +02:00
Giuseppe Scrivano	760ce081a6	Merge pull request #29192 from Luap99/flakes ... three flakes fixes for system tests	2026-07-15 13:42:21 +02:00
Jan Rodák	bb4695870e	Merge pull request #28984 from stefan8/test/apiv2-manifest-create-images-query ... test: add apiv2 coverage for the manifest-create images query param	2026-07-15 13:10:40 +02:00
renovate[bot]	a5c92c6130	Update module github.com/go-swagger/go-swagger to v0.35.0 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-07-15 10:58:17 +00:00
Paul Holzinger	b64140e0ef	update dessant/lock-threads to v6.0.2 ... We need this so the action accepts the new github token format. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-15 12:35:24 +02:00
Paul Holzinger	14db369cdd	issue_pr_lock.yml: use client id ... Using the app id is deprecated, also so far since the repo move this workflow failed all the time as the github app was not in the new org. I created a new app for this and set the right vars. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-15 12:32:07 +02:00
Paul Holzinger	499503b18c	remove first_contrib_cert_generator.yml ... This action never worked AFAICT, no cert was ever created[1] (outside of the test certs on another repo) and the job gets always skipped. Since nobody seems to be bothered by this it should be removed IMO. Given the action commit access to the other repo was never a good idea and with the CNCF move now we should not depend on it any more. Like it is right now it just wastes action resources. And renovate will update the action in the workflow so we get extra PRs for no benefit to review and validate. [1] https://github.com/containers/automation/tree/main/certificates Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-07-15 11:53:59 +02:00
Mario Loriedo	48f21de496	Fixing machine e2e gvproxy test ... The lookup for the gvproxy process was broken on Windows: - We looked for gvproxy, not gvproxy.exe, and `tasklist` was always failing - But `pgrep` wasn't failing because we looked for the wrong `tasklist` error message (the correct error message on my laptop is "INFO: No tasks are running which match the specified criteria.") - WSL uses win-sshproxy.exe, not gvproxy.exe Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-07-15 11:42:11 +02:00
Ashley Cui	e3727b88b1	Merge pull request #29172 from NeddM/docs/release-process-gha ... docs: update release process for GitHub Actions	2026-07-14 09:47:29 -04:00
Paul Holzinger	0f71556ca4	Merge pull request #29191 from podman-container-tools/renovate/actions-setup-node-7.x ... Update actions/setup-node action to v7	2026-07-14 15:28:14 +02:00