28518 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Mario Loriedo	d06e6c3452	CI: use go version stable and not go.mod ... Users have reported some issues with Podman built with the stable ver of go (this is the version used in the release workflow): #29891. The problem hasn't been reproduced in PR checks because because it uses a different version of Go (from `go.mod`). This commit updates `ci.yaml` to be consistent with `release-build-artifacts.yml`. It also set the version of Go to v1.26 to fix #29891. Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-10-05 17:03:47 +02:00
Matt Heon	029d759171	Merge pull request #29637 from ROKUMATE/remove-dead-ps-pod-sort ... podman ps: allow sorting by pod (finishes #13033's --sort half)	2026-10-02 15:24:11 -04:00
Paul Holzinger	7ea8b6c2c0	Merge pull request #29884 from mheon/move_office_hours ... Move office hours back by a half hour	2026-10-02 18:24:49 +02:00
Jan Rodák	1c96b7b533	Merge pull request #29879 from podman-container-tools/renovate/github.com-moby-moby-client-0.x ... Update module github.com/moby/moby/client to v0.6.1	2026-10-02 17:11:45 +02:00
Matt Heon	d7413ff352	Merge pull request #29658 from Honny1/desing-doc-unnamed-artifacts ... Add design doc for handling unnamed artifact orphans	2026-10-02 11:10:43 -04:00
Jan Rodák	594ba03135	Add design doc for handling unnamed artifact orphans ... Ref: https://github.com/podman-container-tools/podman/issues/28033 Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-10-02 16:56:08 +02:00
Matt Heon	c3f2e53366	Move office hours back by a half hour ... Changed per vote on Github: https://github.com/podman-container-tools/podman/discussions/29756 Signed-off-by: Matt Heon <matthew.heon@pm.me>	2026-10-02 10:50:19 -04:00
Jan Rodák	54ba3be4c0	Merge pull request #29348 from locker95/docs/all-tags-unqualified-registries ... docs: clarify --all-tags and --include-volumes	2026-10-02 15:33:15 +02:00
Dean Chen	bce0a59c3c	docs: clarify --all-tags and --include-volumes behavior ... Unqualified names with --all-tags always resolve via docker.io rather than registries.conf search lists. Spell that out, and note that --include-volumes only applies when set to true. Fixes #23625 Fixes #15387 Signed-off-by: Dean Chen <862469039@qq.com>	2026-10-02 15:09:46 +02:00
Paul Holzinger	7ca6c0e94c	Merge pull request #29876 from podman-container-tools/renovate/github.com-mattn-go-shellwords-1.x ... Update module github.com/mattn/go-shellwords to v1.0.16	2026-10-02 13:54:45 +02:00
Paul Holzinger	8fa7fb13ec	test/python/docker: fix swagger check ... The moby swagger.yaml was changed to quote HTTP status codes as string as part of moby commit 79658025a2fd. Thus fix the key lookup here to use a string as well. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-10-02 12:46:55 +02:00
Jan Rodák	8a7cbd9b15	Merge pull request #29842 from pooyanazad/fix-cp-volume-subpath-29840 ... libpod: honor volume subpath in cp	2026-10-02 12:46:09 +02:00
Paul Holzinger	65becac833	Merge pull request #29877 from kolyshkin/e2e-ubu2604 ... test/e2e: fix podman run with noexec for ubuntu 26.04	2026-10-02 12:35:40 +02:00
renovate[bot]	7774a975a3	Update module github.com/moby/moby/client to v0.6.1 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-02 00:23:10 +00:00
renovate[bot]	a02607aa1b	Update module github.com/mattn/go-shellwords to v1.0.16 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-10-01 18:44:50 +00:00
Kir Kolyshkin	9a2c84b130	test/e2e: fix podman run with noexec for ubuntu 26.04 ... Test case bind mounts host's /bin to /hostbin and tries to exec /hostbin/ls, and expects a particular exit code. It does not work on Ubuntu 26.04 because it ships with coreutils-rs by default, in which: /bin/ls -> ../lib/cargo/bin/coreutils/ls and so we get ENOENT instead of EPERM. Fix by replacing ls with true. The funny thing is, it's also a symlink on Ubuntu 26.04: /bin/true -> gnutrue but it works since the destination is in the same directory. (NOTE the whole test relies on the fact that the kernel checks permissions first -- a dynamic binary from a different distro won't be able to run anyway.) Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>	2026-10-01 11:29:30 -07:00
Paul Holzinger	ccc1e20775	Merge pull request #29868 from gabrielima7/fix/29835-omit-journald-event-timestamps ... events/journald: omit timestamp from log output	2026-10-01 16:09:59 +02:00
Paul Holzinger	54afd0e512	Merge pull request #29853 from schmitt-christopher/fix/certificate-import-path-quoting ... Fix: Quote paths on import of native CA Certificates to support special chars in hosts home path	2026-10-01 13:51:07 +02:00
Gabriel	a55d383fc7	events/journald: omit timestamp from log output ... Journald already records native timestamps for each entry, making the embedded timestamp in the Podman event string redundant and noisy. Omit the timestamp prefix from the human-readable string dispatched to journald while preserving the timestamp for 'podman events' CLI output. Fixes: #29835 Signed-off-by: Gabriel <g4briel.lima7@gmail.com>	2026-09-30 14:19:40 -03:00
pooyanazad	ac136b7999	libpod: pin volume subpaths during copy ... Keep the selected subpath mounted while stat and copy use it so a shared volume cannot redirect the copy root with a symlink. Release the mount after each operation and cover source replacement in a regression test. Signed-off-by: pooyanazad <pooyan.azadparvar@gmail.com>	2026-09-30 18:21:36 +02:00
pooyanazad	bf3a78f22a	libpod: honor volume subpath in cp ... When copying files from created or stopped containers, podman cp resolves named volumes on the host instead of using the container mount namespace. The host-side resolution currently starts at the volume root and ignores the mount's configured subpath, so cp can read a different file than the one visible inside the container. Apply the configured volume subpath before resolving the remaining container path. Keep the path within the volume using secure path resolution and add coverage for created, running, and stopped containers. Fixes: #29840 Signed-off-by: pooyanazad <pooyan.azadparvar@gmail.com>	2026-09-30 18:19:10 +02:00
Paul Holzinger	a91da8a402	Merge pull request #29789 from nalind/update-buildah ... Bump buildah to main	2026-09-30 17:50:07 +02:00
Jan Rodák	7eaeecd7f8	Merge pull request #29851 from amccabe/fix-pidhandle-esrch ... Handle ESRCH from openByHandleAt in addition to ESTALE in NewPIDHandleFromString	2026-09-30 17:35:17 +02:00
ROKUMATE	975833a33b	podman ps: allow sorting by pod ... Fixes: #13033 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-09-30 18:37:36 +05:30
Christopher Schmitt	55c233fc94	Quote the shell command arguments for copying certificate files into podman anchor path ... Signed-off-by: Christopher Schmitt <schmitt.christopher1@web.de>	2026-09-30 14:54:13 +02:00
Paul Holzinger	635b58da0b	Merge pull request #29274 from prayag0one4/fix/hostname-off-by-one-id-truncation ... Remove unnecessary length check for container hostname ID	2026-09-30 13:32:07 +02:00
Jan Rodák	ac12be994e	Merge pull request #29844 from Garvity/fix/ps-label-table-headings ... ps: fix label lookup in container and pod table headings	2026-09-30 09:18:32 +02:00
Matt Heon	c2f2b19ec8	Merge pull request #29852 from Luap99/multiple-pods-flake ... test/e2e: fix flake in "multiple Pod replicas"	2026-09-29 18:01:02 -04:00
Andrew McCabe	a10ba5e474	pkg/pidhandle: handle ESRCH from openByHandleAt ... The kernel can return ESRCH in addition to ESTALE from open_by_handle_at when the process no longer exists. Signed-off-by: Andrew McCabe <amccabe@users.noreply.github.com>	2026-09-29 13:21:09 -04:00
Paul Holzinger	30a0f83f39	Merge commit from fork ... Revert "Enable 'podman run' for checkpoint images"	2026-09-29 14:49:04 +02:00
Garv Changrani	d2b8502869	ps: fix label lookup in container and pod table headings ... Table headings for `podman ps` and `podman pod ps` use a plain `map[string]string`. A table template that calls `.Label` with an argument fails while rendering the headings, before listing rows are printed. For example: `podman ps --format 'table {{.Label "app"}}'` Add a shared `PsHeader` type in `cmd/podman/common` with a `Label` method that returns the requested label name as the column heading. Use this type for both container and pod listings. Add container unit tests and extend the existing container and pod e2e tests to check label headings, label values, missing labels, unlabeled objects, and `--noheading` output. Fixes: #29831 Signed-off-by: Garv Changrani <154041471+Garvity@users.noreply.github.com>	2026-09-29 11:29:57 +00:00
Paul Holzinger	b2262db560	test/e2e: fix flake in "multiple Pod replicas" ... GetPort() may return the same port twice, ensure we avoid the case to not make the startup fail on a port conflict. I saw this fail in CI once: $ podman [options] kube play -q --multiple-pods --publish 5811:80,5811:80 /tmp/podman-e2e-759165132/subtest-4128675097/p/ptemp/kube.yaml starting container b0aea9c7e396: rootlessport listen tcp :5811: bind: address already in use Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-29 13:12:32 +02:00
Paul Holzinger	b71273be85	test/e2e: remove duplicated test logic ... The kube down test does the exact same thing already so there is really no need to duplicate this in the interest of test runtime. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-29 13:03:28 +02:00
Nalin Dahyabhai	eda29a56bf	image build contexts: pay attention to tlsVerify flags ... When fetching build context tarballs for use in a build, pay attention to the tlsVerify setting at the command line (in non-remote cases) or in the build query (in remote cases), and whatever proxy settings are set in the current environment for whichever process is connecting to a server that may or may not be using TLS. Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>	2026-09-29 06:05:20 -04:00
Nalin Dahyabhai	61195895f3	Pass context.Context values down to newer buildah APIs ... Buildah added some variants of APIs that should improve support for cancellation, so let's use them. Remove the import alias for its copier package in cmd/podman/containers/cp.go and libpod/container_copy_common.go to be more friendly to grep. Update the "prune leftover build containers" test to intentionally leave some behind during its setup instead of SIGKILLing a build process. Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>	2026-09-29 06:05:20 -04:00
Nalin Dahyabhai	3481dd492f	Bump go.podman.io/buildah to main ... Bump go.podman.io/buildah to b05874667205b40322adce5949ab0967f4e913ef to incorporate fixes from GHSA-3528-5p26-cf44. Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>	2026-09-29 06:05:20 -04:00
Danish Prakash	602de6d1d0	Merge pull request #29366 from WasThatRudy/fix-compat-status-filter ... compat: ignore dead and restarting status filters	2026-09-29 11:48:05 +05:30
Danish Prakash	b137fe8f48	Merge pull request #29830 from podman-container-tools/renovate/golangci-golangci-lint-2.x ... Update dependency golangci/golangci-lint to v2.14.0	2026-09-29 11:23:59 +05:30
Rudraksha Singh	2ac2529bf7	compat: ignore dead and restarting status filters ... Docker documents `dead` and `restarting` as valid values for the `status` filter on `/containers/json`. Podman returns HTTP 500 when either of them is used even though no Podman container can ever be in those states. Ignore these values in the compat API. If they are the only status filters, return an empty list like Docker does. Invalid status values still return an error. The libpod API still rejects these values since they are Docker specific. Update the libpod API docs to list the states Podman actually supports. Reference: https://docs.docker.com/reference/api/engine/version/v1.51/#tag/Container/operation/ContainerList Fixes: #28904 Signed-off-by: Rudraksha Singh <rudraksharss@gmail.com>	2026-09-29 00:21:19 +05:30
Paul Holzinger	7904e02043	Merge pull request #29800 from lsm5/packit-koji-bodhi-target-update ... packit: koji and bodhi job targets taken from rawhide config	2026-09-28 18:09:28 +02:00
Paul Holzinger	a9cafaed38	Merge pull request #29814 from l0rd/fix-bindings-unit-tests-windows ... Don't skip pkg/bindings unit tests on Windows	2026-09-28 18:05:33 +02:00
Paul Holzinger	6f2c81b9dd	Merge pull request #29816 from lsm5/lsm5-alumni ... MAINTAINERS.md: move lsm5 to alumni	2026-09-28 17:33:06 +02:00
Matt Heon	fa6cef22c2	Rework podman run checkpoint test ... Needs to properly handle the error now that we've removed the functionality. Signed-off-by: Matt Heon <matthew.heon@pm.me>	2026-09-28 10:28:29 -04:00
renovate[bot]	8f78e9ab7f	Update dependency golangci/golangci-lint to v2.14.0 ... And tweak import formatting for one file which is now flagged. Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-09-28 15:36:29 +02:00
Matt Heon	c74b1d37b3	Error when a checkpoint image is run ... Support for these was removed in 3721ff82ff as the feature is inherently insecure. Checkpoints imply an extremely privileged operation that is incompatible with the constraints of a `podman run` command. However, we should still tell folks that it no longer works with a clear error message. This is done during Specgen processing, server side, which should be safer than the previous client-side processing for these. Signed-off-by: Matt Heon <matthew.heon@pm.me>	2026-09-28 09:26:35 -04:00
Matt Heon	3721ff82ff	Revert "Enable 'podman run' for checkpoint images" ... This reverts commit f4401567cd. This commit has been identified as a serious security issue. Running checkpoints via `podman run` introduces potentially confusing behavior where all security for a container, even options specified by the user at the command line, can be turned off by the checkpoint. Checkpoints have special security considerations and must be explicitly requested by the user to ensure they are used safely. We recommend ensuring the lifecycle of a checkpoint is fully monitored and integrity is ensured at each stage to guarantee safety. Signed-off-by: Matt Heon <matthew.heon@pm.me>	2026-09-28 07:48:00 -04:00
Paul Holzinger	345b2c7fc2	Merge pull request #29841 from mtrmac/no-tls-details ... Document that we are not working on --tls-details any more	2026-09-28 12:56:04 +02:00
Paul Holzinger	95fc00bca3	Merge pull request #29657 from sundeep8967/fix/pause-process-environ ... rootless: clear environment before spawning pause process	2026-09-28 12:54:47 +02:00
Jan Rodák	dc5add9d80	Merge pull request #29845 from podman-container-tools/renovate/github.com-vbauerster-mpb-v8-8.x ... Update module github.com/vbauerster/mpb/v8 to v8.16.2	2026-09-28 12:23:33 +02:00
renovate[bot]	f24069ce72	Update module github.com/vbauerster/mpb/v8 to v8.16.2 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-09-26 16:29:55 +00:00