Commit graph

26165 commits

Author SHA1 Message Date
Paul Holzinger
973ab34078 use return error handling in SetupRootless
There is no good reason to use logrus and os.Exit() here, other parts of
this function already return the error so do the same. The main podman
process will exit then with the normal formatted error message.

And also log an error about the last return which should never happen as
we should have exited above if the re-exec worked or errored out.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-26 10:18:30 +00:00
openshift-merge-bot[bot]
8ca1ebb0cd
Merge pull request #27547 from openshift-cherrypick-robot/cherry-pick-27506-to-v5.7
[v5.7] docs: fix redoc swagger URL
2025-11-17 18:02:12 +00:00
Paul Holzinger
db82b92d0a docs: fix redoc swagger URL
Currently our API docs are not working as it fails to fetch the js file
with the redoc code which renders the swagger.

The reason this fails is because we have been tracking the "next"
version and that was recently bumped to v3.0.0-rc.0 which also seem to
have moved the location to use "bundle" (no s). As such we now get a 404
as the CDN doesn't find the file. [1]

I don't get why we have been tracking next to begin with, using latest
would still work as it points but that could be moved anytime as well so
switch the URL to pull in the lastest v2 version which should be safer
against unexpected changes like that.

While it could of course also break in a minor v2 release hard coding an
exact version would mean a fair amount of churn updating this (which I
guess would not happen) so this looks like the best compromise to me.

[1] https://www.npmjs.com/package/redoc/v/3.0.0-rc.0

Fixes: #27505

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-17 16:08:42 +00:00
openshift-merge-bot[bot]
258bb70019
Merge pull request #27509 from podmanbot/bump-5.7.1-dev
Bump Podman to v5.7.1-dev
2025-11-12 10:51:48 +00:00
lsm5
9257ac4822 Bump Podman to v5.7.1-dev
Signed-off-by: lsm5 <247367+lsm5@users.noreply.github.com>
2025-11-11 18:51:37 +00:00
openshift-merge-bot[bot]
cdcd8da1ba
Merge pull request #27500 from lsm5/570-release
Bump to v5.7.0
2025-11-11 18:47:28 +00:00
Lokesh Mandvekar
0370128fc8
Bump to v5.7.0
Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-11-11 08:51:07 -05:00
Lokesh Mandvekar
84c31b8fae
Create release notes for v5.7.0
Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-11-11 08:51:07 -05:00
openshift-merge-bot[bot]
54402fe649
Merge pull request #27490 from lsm5/v5.7
[v5.7] Packit/TMT: remove podman-next repos from release branches
2025-11-10 18:50:32 +00:00
openshift-merge-bot[bot]
6289badee4
Merge pull request #27492 from openshift-cherrypick-robot/cherry-pick-27472-to-v5.7
[v5.7] various different test fixes
2025-11-10 15:58:30 +00:00
Paul Holzinger
b6b8d23abd hack/bats: port it to use the new remote support
The system tests can setup their own server now so just use that and
don't require the user to spawn its own.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Paul Holzinger
129c344b49 test/system: fix broken podman_runtime
This got broken during the remote testing rewrite to enable tls testing
in commit feb36e4fe6. The problem is the function didn't use the proper
podman command with the remote arg so it tried to connect to the default
socket with remote testing.

And in the checkpoint file we use it before the PODMAN_CMD was defined
so fix this by moving the basic_setup before and the use the variable
PODMAN_RUNTIME instead of having to do another info call.

Also fix the debug log output to correctly log the podman commands with
all arguments on a single line.

Fixes: feb36e4fe6 ("Implement TLS API Support")
Fixes: #27266

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Paul Holzinger
708f7a14f3 test/system: fix artifact test cleanup
Make sure to rmeove the artifact but we don't need to remove the
testfiles as they are part under PODMAN_TMPDIR which gets removed by
default so don't bother with that.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Paul Holzinger
e737d75b2f test/system: merge artifact tests into single file
There is no need for several files here, it just means the setup and
helpers get duplicated.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Paul Holzinger
58733d714a test/system: rework artifact created test
- use nanoseconds, so we don't need to sleep a full second do put the
  time forward.
- use the --format option instead of jq
- run test via remote as well
- don't use static file content

Fixes: #27265

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Paul Holzinger
372e142252 test/system: remove 701-artifact-created.bats
The tests there are a duplicate compared to the 702 file.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Paul Holzinger
bfddcb3384 test/system: do not run artifact test in parallel
They do not seem safe to use concurrently, see #27264.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Paul Holzinger
199254f039 test/system: skip flaky restore test on debian
Somehow this only flakes on debian as it seem the /etc/hosts file on the
host system changes and thus causes a false postive with the
before/after restore comparison.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Paul Holzinger
0c99f623aa test/e2e: try to fix clean up after terminated build flake
It is failing with:
replacing mount point ".../root/overlay/xxx/merged": directory not empty

First, the build does not need network so ensure we don't leak network
allocations by killing it. Second, kill is always async so ensure to
wait for the actul build process exit.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-10 15:14:48 +00:00
Lokesh Mandvekar
ec1efdbdac
[v5.7] Packit/TMT: remove podman-next repos from release branches
Release branches should be tested with what's in the official repos or intended
to go there soon.

Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2025-11-10 09:07:15 -05:00
openshift-merge-bot[bot]
6554773181
Merge pull request #27460 from TomSweeneyRedHat/dev/tsweeney/cve-2025-52881-v5.7
[v5.7] Bump to runc v1.3.3 - CVE-2025-52881
2025-11-07 18:06:26 +00:00
Paul Holzinger
97ad660c0c [v5.7] fix lint issues with github.com/cyphar/filepath-securejoin
The old location is deprecated and has been removed in v0.6.0 even. I
did this as extra commit to make cherry-picking easier.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-11-07 10:58:16 -05:00
tomsweeneyredhat
e6deadcc34 [v5.7] Bump to runc v1.3.3 - CVE-2025-52881
Bump to runc v1.3.3 to address CVE-2025-52881

Fixes: https://issues.redhat.com/browse/RHEL-126635

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-11-07 10:58:16 -05:00
openshift-merge-bot[bot]
0c7fa9b453
Merge pull request #27464 from Luap99/v5.7
[v5.7] roate aws keys
2025-11-07 15:36:17 +00:00
Tim Zhou
cbda92e6b3
rotate aws meta_task keys
Signed-off-by: Tim Zhou <tizhou@redhat.com>
(cherry picked from commit f06f77468d)
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 11:51:07 +01:00
Tim Zhou
3d23aa4a6b
rotate aws key
Signed-off-by: Tim Zhou <tizhou@redhat.com>
(cherry picked from commit 2cfd526ec8)
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 11:51:06 +01:00
openshift-merge-bot[bot]
7d29b78563
Merge pull request #27446 from podmanbot/bump-5.7.0-dev
Bump Podman to v5.7.0-dev
2025-11-05 19:56:24 +00:00
mheon
da8d069e6a Bump Podman to v5.7.0-dev
Signed-off-by: mheon <7735048+mheon@users.noreply.github.com>
2025-11-05 16:34:06 +00:00
openshift-merge-bot[bot]
eda53c838b
Merge pull request #27445 from mheon/bump_570_rc3
Bump to  v5.7.0-RC3
2025-11-05 16:08:11 +00:00
Matt Heon
85a6e7f8d7
Bump to v5.7.0-rc3
Signed-off-by: Matt Heon <mheon@redhat.com>
2025-11-05 09:13:02 -05:00
Matt Heon
b7d1f77147 Update release notes for v5.7.0-rc3
Signed-off-by: Matt Heon <mheon@redhat.com>
2025-11-05 09:12:47 -05:00
openshift-merge-bot[bot]
60c3bc3437
Merge pull request #27434 from openshift-cherrypick-robot/cherry-pick-27430-to-v5.7
[v5.7] Fix cache misses when pulling WSL machine image
2025-11-05 14:02:20 +00:00
Mario Loriedo
fb8644d551 Fix cache misses when pulling WSL machine image
Fixes a regression introduced by b2e6d53 that made always failing the
match of the WSL image from the registry with the image in the local
cache. The result was that the WSL machine image was always pulled from
quay.io even if an identical image was in the local cache.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-11-05 11:53:57 +00:00
openshift-merge-bot[bot]
9d87f8bf10
Merge pull request #27437 from openshift-cherrypick-robot/cherry-pick-27333-to-v5.7
[v5.7] Eliminate network dependencies in `podman search` e2e tests with mock registry
2025-11-04 19:02:32 +00:00
openshift-merge-bot[bot]
6dd52dd004
Merge pull request #27433 from openshift-cherrypick-robot/cherry-pick-27140-to-v5.7
[v5.7] Add tmt integration plan
2025-11-04 18:51:36 +00:00
Jan Rodák
c4357e7112 test: organize search tests with BeforeEach/AfterEach patterns
Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-11-04 17:48:20 +00:00
Jan Rodák
64fbc2557e test: refactor search_test.go to use helper functions and PodmanExitCleanly
Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-11-04 17:48:20 +00:00
Jan Rodák
d6f660076b test: Replace external registry deps with mock server in search tests
- Add comprehensive mock registry server for e2e search tests
- Replace quay.io and other external registry calls with local mock
- Improve test reliability by removing network dependencies
- Maintain full test coverage with controlled mock data

Fixes: https://github.com/containers/podman/issues/27304
Fixes: https://issues.redhat.com/browse/RUN-3623

Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-11-04 17:48:20 +00:00
openshift-merge-bot[bot]
efaf760d47
Merge pull request #27432 from openshift-cherrypick-robot/cherry-pick-27428-to-v5.7
[v5.7] Bump bundled krunkit from 1.1.0 to 1.1.1
2025-11-04 13:29:58 +00:00
Cristian Le
a59eaccbe2 Add tmt integration plan
See:
- https://github.com/teemtee/tmt/issues/4047
- https://github.com/teemtee/tmt/pull/4026

Signed-off-by: Cristian Le <git@lecris.dev>
2025-11-04 13:08:36 +00:00
Sergio Lopez
bfae53709c Bump bundled krunkit from 1.1.0 to 1.1.1
Bump bundled krunkit to 1.1.1. This is a minor, expedited release
to fix a library linking problem.

Fixes: #27427
Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-11-04 13:03:11 +00:00
openshift-merge-bot[bot]
fe0823a128
Merge pull request #27409 from openshift-cherrypick-robot/cherry-pick-27408-to-v5.7
[v5.7] Allow RC Windows Installer to be built
2025-10-30 10:11:43 +00:00
Ashley Cui
f12c838fb7 Allow RC Windows Installer to be built
The windows installer doesn't like -rc's because it's not strictly semver, but this error can be suppressed.

Signed-off-by: Ashley Cui <acui@redhat.com>
2025-10-30 09:52:37 +00:00
openshift-merge-bot[bot]
7491722c3b
Merge pull request #27402 from podmanbot/bump-5.7.0-dev
Bump Podman to v5.7.0-dev
2025-10-29 21:15:33 +00:00
openshift-merge-bot[bot]
5d98e56f17
Merge pull request #27404 from openshift-cherrypick-robot/cherry-pick-27401-to-v5.7
[v5.7] Allow failures on WSL machine tests
2025-10-29 21:04:31 +00:00
Matt Heon
d0b45ff1f0 Allow failures on WSL machine tests
The WSL tests for `podman machine` are flaking with unreasonable
frequency right now. Last Friday, I needed to re-run a job 8
times to get it to pass and complete the release of 5.7 RC1. This
is simply not sustainable. Mark the tests allowed-failure until
this can be resolved.

Signed-off-by: Matt Heon <mheon@redhat.com>
2025-10-29 19:56:24 +00:00
mheon
e68cecbb60 Bump Podman to v5.7.0-dev
Signed-off-by: mheon <7735048+mheon@users.noreply.github.com>
2025-10-29 19:08:25 +00:00
openshift-merge-bot[bot]
20ae14c0bf
Merge pull request #27398 from mheon/bump_570_rc2
Bump to v5.7.0-rc2
2025-10-29 19:06:14 +00:00
Matt Heon
fa892f1df0
Bump to v5.7.0-rc2
Signed-off-by: Matt Heon <mheon@redhat.com>
2025-10-29 11:45:14 -04:00
Matt Heon
e16a54c6bc Add release notes for v5.7.0-rc2
Signed-off-by: Matt Heon <mheon@redhat.com>
2025-10-29 11:44:22 -04:00