8001 commits

Author	SHA1	Message	Date
Jan Rodák	525dfd8700	Merge pull request #29758 from haneul-24/fix/api-endpoint-content-type ... fix: set correct content-type for generate kube	2026-09-15 11:09:46 +02:00
Matt Heon	6e10d5ac76	Merge pull request #29375 from Mahajan-Sachin/quadlet-volume-remainafterexit ... quadlet: do not set RemainAfterExit=yes for volume units by default	2026-09-14 08:52:48 -04:00
Paul Holzinger	687c5e644a	Merge pull request #29525 from sahilnyk/exec-sigproxy-pgid ... exec: forward signals to the exec session's process group	2026-09-14 13:32:46 +02:00
Sahil Nayak	903a1b6cb6	exec: forward signals to exec sessions over local and remote ... Fixes: #19486 Signed-off-by: Sahil Nayak <contactsahilpnayak@gmail.com>	2026-09-11 21:32:26 +05:30
Paul Holzinger	be177b2434	Merge pull request #29677 from haneul-24/Fix/healthcheck-unit-name ... use systemd unit name for healthcheck units	2026-09-11 13:57:29 +02:00
Danish Prakash	7417ed0613	Merge pull request #29388 from AftAb-25/fix/events-network-filter ... events: add missing support for NETWORK filter	2026-09-11 16:39:41 +05:30
Matt Heon	b638cc9f48	Merge pull request #29295 from InvalidInterrupt/fix_api_restart_def_timeout ... Respect container StopTimeout in container restart REST APIs	2026-09-11 06:40:44 -04:00
Aftab Ali	ff12dabebb	events: add missing NETWORK filter to generateEventFilter ... podman events --filter network=<name> was unconditionally returning 'NETWORK is an invalid filter' because the NETWORK case was absent from the generateEventFilter switch statement in filters.go. All other first-class event types (container, image, pod, volume) had corresponding filter cases, but the Network type - despite being fully defined in config.go along with NetworkConnect/NetworkDisconnect statuses and the Event.Network field - had no handler. Add the NETWORK case to filter by network name (e.Network), consistent with Docker's --filter network= behaviour. ID-prefix matching is intentionally omitted: for network connect/disconnect events e.ID holds the container ID, not the network ID, so prefix matching would only work for create/remove events and silently miss join/leave events. Also add unit tests (filters_test.go), integration tests (test/e2e/events_test.go, test/system/090-events.bats), shell completion support for --filter network= (completion.go), and document the new filter key in the man page. Fixes: https://github.com/podman-container-tools/podman/issues/29387 Signed-off-by: Aftab Ali <aftab123215@gmail.com>	2026-09-11 14:31:30 +05:30
Danish Prakash	6b8f0d7b73	Merge pull request #29180 from Honny1/vendor-test-pr-845-container-libs ... [Tests] Add blob-level mirror fallback integration tests	2026-09-11 09:34:56 +05:30
Sejal	258ba032e1	use consistent name for healthcheck units ... Fixes: #29373 Signed-off-by: Sejal <sej1306kook@gmail.com>	2026-09-10 16:55:33 +00:00
Paul Holzinger	0b62a84304	Merge pull request #29653 from Atishyy27/fix/remote-prune-filter-equals-v2 ... fix(remote): keep '=' in a prune filter value	2026-09-10 18:20:31 +02:00
Paul Holzinger	c7e44e4790	test/apiv2: remove cgroupv2 check ... Since podman 6 we only support cgroupv2 systems. Therefore we no longer need this check in the tests and we can simplify them. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-10 12:37:52 +02:00
Paul Holzinger	36c16331f6	test/system: remove cgroupv2 check ... Since podman 6 we only support cgroupv2 systems. Therefore we no longer need this check in the tests and we can simplify them. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-10 12:33:16 +02:00
Lokesh Mandvekar	820b7bec17	test/e2e: drop dead network_cmd_options config key ... The network_cmd_options engine setting was backed by the slirp4netns network stack, which has been removed. The key is now a no-op (unknown TOML keys are only debug-logged), so drop it from the e2e test config. Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>	2026-09-09 10:30:47 -04:00
Lokesh Mandvekar	10b487f229	Merge pull request #29722 from Luap99/lint ... Update golangci/golangci-lint to v2.13.2	2026-09-07 09:33:26 -04:00
Sachin Mahajan	e822e89e5d	quadlet: do not set RemainAfterExit=yes for volume units by default ... Do not set RemainAfterExit=yes by default when converting Quadlet .volume files to systemd oneshot services. Setting RemainAfterExit=yes causes systemd to consider the volume service active even after the volume is deleted manually, preventing systemd from re-executing volume creation when dependent container services restart. Fixes #27862 Signed-off-by: Sachin Mahajan <sachinmahajan903@gmail.com>	2026-09-07 16:26:10 +05:30
Sejal	b5b558d671	fix: set correct content-type for generate kube ... Fixes: #29674 Signed-off-by: Sejal <sej1306kook@gmail.com>	2026-09-05 23:21:50 +00:00
Danish Prakash	764021086d	Merge pull request #29606 from vishnukothakapu/perf-slices-sort ... Performance: Upgrade sort.Slice to slices.SortFunc across codebase	2026-09-04 21:19:24 +05:30
Paul Holzinger	53a9bcbe13	run golangci-lint --fix ... In order to fix the new formatting issues reported. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-04 16:30:10 +02:00
Paul Holzinger	afe45cccb6	Merge pull request #29714 from Luap99/go-1.26 ... Update to Go 1.26	2026-09-04 15:48:09 +02:00
Paul Holzinger	8b216d16c4	Merge pull request #29656 from hkwi/fix-compat-stats-http-status ... api: reflect container stats errors in HTTP status codes	2026-09-04 15:17:42 +02:00
Paul Holzinger	258001db67	Merge pull request #29496 from simek-m/RUN-3319-info-runtimes-status ... compat: Add status for runtimes to GET /info	2026-09-04 13:54:34 +02:00
Hiroaki KAWAI	d56f52c8a7	api: reflect container stats errors in HTTP status codes ... Existing KillContainer handling uses HTTP status code 409 when the request cannot be performed because of the current container state. HTTP status code 404 is also used when the target container does not exist. In contrast, errors from the stats handler are not reflected in the HTTP status code. The HTTP status code is always 200, and the errors are recorded only as generic errors in the server log. To maintain compatibility with both streaming enabled and disabled, this change treats obtaining at least one complete unit of response content as the response contract. It then keeps the response content consistent with the HTTP status code. Signed-off-by: Hiroaki KAWAI <hiroaki.kawai@gmail.com>	2026-09-04 20:42:55 +09:00
Paul Holzinger	6c6eac3a5c	run modernize -fix ./... ... Since I use go 1.26 the go fix does not have all the rules built in, there are newer ones in modernize so run the explicitly to fix more code for go 1.26. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-04 11:53:04 +02:00
Paul Holzinger	eb96a9d5b8	run go fix ./... ... Plus manually deleting the left over inline functions because go fix doesn't do that even though they are private functions. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-04 11:53:04 +02:00
Jan Rodák	ec30171911	Merge pull request #29660 from simek-m/RUN-3316-compat-until-filter ... compat: Document and test GET /images/json until filter	2026-09-04 11:45:24 +02:00
Marek Simek	81ec75c4ec	compat: Add status for runtimes to GET /info ... Docker API v1.44 now includes status properties in Runtimes for the GET /info endpoint. Read output of {oci_runtime_cmd} features command lazily and expose the JSON output as-is (with removed new lines and whitespace) as the status field in GET /info for v1.44+. Add status to libpod GET /info in ociRuntime.features and `podman info` (shared). Add API tests for both endpoints. Fixes: https://redhat.atlassian.net/browse/RUN-3319 Signed-off-by: Marek Simek <msimek@redhat.com>	2026-09-04 11:37:47 +02:00
Paul Holzinger	f6487b7546	Merge pull request #29669 from CodeWithAK28/manifest-annotate-subject-remote ... pkg/bindings, pkg/api: send the manifest index subject to the server	2026-09-03 18:21:01 +02:00
Garry Lawrence	545674291a	Respect container StopTimeout in container restart REST APIs ... RestartContainer was always setting options.Timeout with values from query, without checking if the caller had specified them or if they were simply zero values. Copy logic from StopContainer to check for caller-specified values, leaving Timeout nil if not specified. fixes: https://github.com/podman-container-tools/podman/issues/29276 Signed-off-by: Garry Lawrence <InvalidInterrupt@users.noreply.github.com>	2026-09-02 10:39:55 -07:00
Jan Rodák	77bbf5fa79	Add blob-level mirror fallback integration tests ... Integration tests to verify podman-container-tools/container-libs#845 Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-09-02 14:19:55 +02:00
Danish Prakash	f9d0a4dff5	Merge pull request #29694 from Luap99/pasta-flake ... Revert "test/system: skip one new pasta flake"	2026-09-02 12:58:03 +05:30
Anisha Khairnar	b760306614	pkg/bindings, pkg/api: send the manifest index subject to the server ... Two commands can set a subject on a manifest list, podman manifest annotate --index --subject and podman manifest add --artifact-subject. Both work locally, but they do nothing at all when podman runs with --remote. The value never leaves the client. Before sending the request the remote client copies everything into manifests.ModifyOptions and manifests.AddArtifactOptions, and neither struct had a field to hold the subject, so it was quietly thrown away. The server had a second problem of its own, ManifestModify rebuilds ManifestAddArtifactOptions by hand and left out the embedded ManifestAnnotateOptions, so --os, --arch and --annotation were being dropped there as well. Add the missing field to both structs, fill it in from the tunnel ImageEngine, and let the handler pass the annotate options along. Also add two system tests that run both flags for real so the remote path stays covered. Signed-off-by: Anisha Khairnar <anishakhairnar284@gmail.com>	2026-09-02 11:57:43 +05:30
Paul Holzinger	c2a7d573e0	Revert "test/system: skip one new pasta flake" ... This reverts commit 0dbe00d272. The linked bug[1] has been fixed for a while now, remove the skip to test the port forwarding range properly again with pasta. The CI images all have a new enough pasta. [1] https://bugs.passt.top/show_bug.cgi?id=202 Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-01 19:19:23 +02:00
Ashley Cui	af579ec299	Add --platform to podman push ... When pushing a manifest list, --platform=OS[/Arch[/Variant]] selects and pushes a single platform-specific manifest instead of the entire list. Also, update compat POST /images/{name}/push to support the platform param (Compat v1.46) Signed-off-by: Ashley Cui <acui@redhat.com>	2026-09-01 11:30:48 -04:00
Jan Rodák	0b2d7729c5	Merge pull request #29654 from Atishyy27/fix/subpath-equals-truncation ... fix(libpod): keep '=' in a volume subpath	2026-09-01 13:55:17 +02:00
Danish Prakash	7efd442600	Merge pull request #29690 from ricardobranco777/410_selinux ... test/system: Update test to handle new error message from runc 1.5.0	2026-09-01 16:38:13 +05:30
Paul Holzinger	9242ecc42f	Merge pull request #29673 from Xiaowen-Yang/codex/fix-29664-attach-exited ... api: avoid reinitializing exited containers on logs-only attach	2026-09-01 12:36:00 +02:00
Ricardo Branco	7e8002dd08	test/system: Update test to handle new error message from runc 1.5.0 ... runc 1.5.0 switched to a safe procfs API for setting SELinux labels, so reopened handles no longer carry a /proc/self path in error messages, e.g. "write /1/attr/keycreate: invalid argument" instead of "write /proc/self/attr/keycreate: invalid argument". Relax the regex to match on "attr/keycreate" without requiring the proc/self prefix. Signed-off-by: Ricardo Branco <rbranco@suse.de>	2026-09-01 11:01:36 +02:00
Giuseppe Scrivano	58489b82b4	libpod: fix :O overlay volumes in a userns ... When the user owning the storage is not mapped into the container user namespace (e.g. root with --userns=auto), the runtime cannot mount an overlay volume from inside the user namespace. Mount the overlay in podman instead and pass the runtime a bind mount. Closes: https://github.com/podman-container-tools/podman/issues/28758 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>	2026-09-01 09:50:51 +02:00
Xiaowen-Yang	1c8f2963a1	Preserve exited state for logs-only HTTP attach ... Fixes: #29664 Signed-off-by: Xiaowen-Yang <xiaowenyang52@gmail.com>	2026-08-31 20:31:24 +02:00
Marek Simek	d6c2cf29dd	compat: Document and test GET /images/json until filter ... The `until` filter was missing from the documentation. Document it for both GET /libpod/images/json and the compat GET /images/json. Add tests for the until filter exercising both endpoints. Fixes: https://redhat.atlassian.net/browse/RUN-3316 Signed-off-by: Marek Simek <msimek@redhat.com>	2026-08-31 12:11:36 +02:00
Jan Rodák	c30add3f1c	Merge pull request #29667 from CodeWithAK28/remote-push-signing-error ... pkg/domain/infra/tunnel: error when signing a remote push	2026-08-31 11:32:46 +02:00
Anisha Khairnar	ee1d224bad	test/e2e: skip the save signature test on remote ... Signed-off-by: Anisha Khairnar <anishakhairnar284@gmail.com>	2026-08-29 14:19:26 +05:30
Anisha Khairnar	123b9024d5	pkg/domain/infra/tunnel: error when signing a remote push ... Signed-off-by: Anisha Khairnar <anishakhairnar284@gmail.com>	2026-08-28 12:17:51 +05:30
Jan Rodák	7a6c0a0504	Merge pull request #28100 from parmisean/parmisean/implement-ssh-session-type ... pkg/bindings: add dial-stdio fallback for SSH connections	2026-08-28 05:02:14 +02:00
Matt Heon	f542424eab	Merge pull request #29603 from gerryd/feature/create-passwd ... Add support for --passwd to the create command	2026-08-27 22:03:01 -04:00
Gerry Demaret	bd8de9f7aa	Add support for --passwd to the create command ... Give create the same --passwd flag as run currently has. Signed-off-by: Gerry Demaret <gerry@x-net.be>	2026-08-27 15:46:30 +02:00
Atishyy27	44f7900e0d	fix(libpod): keep '=' in a volume subpath ... The subpath mount option is parsed with strings.Split(o, "=")[1], so it keeps only the text between the first and second '='. A subpath that contains '=' gets cut short and the container mounts a different directory than the one that was asked for. --mount type=volume,src=v,dst=/mnt,subpath=/opt/a=b/c mounts /opt/a Signed-off-by: Atishyy27 <sethatishayjain@gmail.com>	2026-08-27 18:20:55 +05:30
Jan Rodák	5eab541350	Merge pull request #29651 from vtushar06/fix-bevalidjson ... test/utils: fix BeValidJSON and remove IsJSONOutputValid	2026-08-27 12:47:08 +02:00
Tushar Verma	d153f4750b	test/e2e: remove IsJSONOutputValid ... Asserting a bool against an expected bool says nothing about the output when it fails. BeValidJSON() prints it, and now that the matcher handles a non match properly the negative rows in the info and version table tests can use it too. Part of #18540. Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-26 22:51:51 +05:30