Commit graph

17861 commits

Author SHA1 Message Date
Ashley Cui
d4e285aa73 Cirrus: Update operating branch
Signed-off-by: Ashley Cui <acui@redhat.com>
2023-02-08 16:02:29 -05:00
Ashley Cui
34e8f39332
Bump to v4.4.1
Signed-off-by: Ashley Cui <acui@redhat.com>
2023-02-08 14:03:18 -05:00
Ashley Cui
7431f3d006 Update release notes for Podman 4.4.1
Signed-off-by: Ashley Cui <acui@redhat.com>
2023-02-08 14:01:19 -05:00
OpenShift Merge Robot
1bde07e041
Merge pull request #17429 from openshift-cherrypick-robot/cherry-pick-17027-to-v4.4
[v4.4] Resolve symlink path for qemu directory if possible
2023-02-08 13:03:47 -05:00
OpenShift Merge Robot
393336bd71
Merge pull request #17430 from openshift-cherrypick-robot/cherry-pick-17420-to-v4.4
[v4.4] kube play: do not teardown unconditionally on error
2023-02-08 11:43:05 -05:00
OpenShift Merge Robot
db50458c2b
Merge pull request #17390 from openshift-cherrypick-robot/cherry-pick-17364-to-v4.4
[v4.4] Add missing return after utils.Error()
2023-02-08 10:00:06 -05:00
Valentin Rothberg
68a58c9a12 kube play: do not teardown unconditionally on error
Commit 2f29639bd3 added a UX improvement to cleanup/teardown when
running the specified YAML has failed.  However, the teardown happens
unconditionally such that rerunning the same YAML file will teardown the
previously created workload instead of just failing with a name-conflict
error (e.g., "pod already exists").  The regression popped up testing
the Ansible system role with Podman v4.4.0.

For now, do not teardown at all on error to quickly fix this regression
for the upcoming Podman v4.4.1 release.  The UX improvement is still
desired but must be conditional and only happen on newly created
resources, which probably requires moving it down to the backend.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-02-08 14:30:08 +00:00
Daniel J Walsh
7b5f724824
Merge pull request #17404 from openshift-cherrypick-robot/cherry-pick-17351-to-v4.4
[v4.4]  Install podman-systemd.unit man page, make quadlet discoverable
2023-02-08 09:28:35 -05:00
Nathan Henrie
a1cc3733b1 Resolve symlink path for qemu directory if possible
Fixes https://github.com/containers/podman/issues/17026
Fixes https://github.com/NixOS/nixpkgs/issues/169118

[NO NEW TESTS NEEDED]

Related: https://github.com/NixOS/nixpkgs/pull/163015
Signed-off-by: Nathan Henrie <nate@n8henrie.com>
2023-02-08 14:17:19 +00:00
OpenShift Merge Robot
f5670f01c9
Merge pull request #17371 from openshift-cherrypick-robot/cherry-pick-17356-to-v4.4
[v4.4] oci: bind mount /sys with --userns=(auto|pod:)
2023-02-08 08:19:27 -05:00
OpenShift Merge Robot
5571faa9ed
Merge pull request #17408 from openshift-cherrypick-robot/cherry-pick-17293-to-v4.4
[v4.4] [CI:DOCS] docs: specify order preference for FROM
2023-02-08 07:16:50 -05:00
OpenShift Merge Robot
37f905cc91
Merge pull request #17410 from openshift-cherrypick-robot/cherry-pick-17398-to-v4.4
[v4.4] Quadlet: exit 0 when there are no files to process
2023-02-08 03:57:35 -05:00
OpenShift Merge Robot
168034546d
Merge pull request #17415 from openshift-cherrypick-robot/cherry-pick-17401-to-v4.4
[v4.4] [CI:DOCS] events: document journald identifiers
2023-02-08 03:30:29 -05:00
Valentin Rothberg
c3d781de0c events: document journald identifiers
Document the identifiers used in the journald events backend. Those can
be used to filter Podman events with journalctl and I need them to be
documented for a blog I am writing at the moment.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-02-08 01:53:00 +00:00
Valentin Rothberg
52ae4a2c40 Quadlet: exit 0 when there are no files to process
Quadlet should not exit with failure if no files to process have been
found.  Otherwise, even simple operations such as reloading systemd
will fail as it retriggers generators.

Fixes: #17374
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-02-07 15:18:03 -05:00
Daniel J Walsh
1ee04fcc71 Cleanup podman-systemd.unit file
Sort options alphabetically

Add kubernetes example.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-02-07 15:11:08 -05:00
Daniel J Walsh
f3ea361004 Install podman-systemd.unit man page, make quadlet discoverable
Currently we are shipping no data about quadlet, since the
podman-systemd.unit file is not shipped. Also want to add the
quadlet name to the description of the man page so that

man -k quadlet

will help users find the man page.

Also add a link file such that if the user types in
man quadlet
man will show the podman-systemd.unit file.

Also eliminate the subpackage podman-quadlet

Fixes: https://github.com/containers/podman/issues/17349

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-02-07 15:10:59 -05:00
Erik Sjölund
2b7ea64428 Add missing return after errors
Add missing return after utils.Error(),
utils.InternalServerError(), utils.BadRequest().

[NO NEW TESTS NEEDED]

Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
2023-02-07 14:51:07 -05:00
Giuseppe Scrivano
1d76a166c6 oci: bind mount /sys with --userns=(auto|pod:)
when using --userns=auto or --userns=pod, we should bind mount /sys
from the host instead of creating a new /sys in the container,
otherwise we rely on the fallback provided by crun, which might not be
available in other runtimes.

Also, in the last version of crun the fallback is stricter than it
used to be before and it uses a recursive bind mount through the new
mount API.  That can be missing on old kernel.

Closes: https://github.com/containers/crun/issues/1131

[NO NEW TESTS NEEDED] to trigger the failure, we need a specific
combination of kernel, libc and OCI runtime.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-02-07 14:40:56 -05:00
Aditya R
20d31a0a6b docs: specify order preference for FROM
When multiple files are specified buildah considers `FROM` instruction
from the last file specified and so does `buildkit` and `docker` so lets
specify that in docs.

[NO NEW TESTS NEEDED]
[NO TESTS NEEDED]

Similar to: https://github.com/containers/buildah/pull/4546

Signed-off-by: Aditya R <arajan@redhat.com>
2023-02-07 14:36:20 -05:00
OpenShift Merge Robot
7378b758ab
Merge pull request #17411 from cevich/fix_graphql_test
[CI:BUILD] Cirrus: Fix & remove GraphQL API tests
2023-02-07 13:46:15 -05:00
Chris Evich
590186e0de
Cirrus: Fix & remove GraphQL API tests
These tests don't need to run for every PR, and the thing they're
testing never runs on any branch except `main`.  Stop them from
running on this branch.  In case someone decides to try and use them,
also fix the errant API call which triggered the original problem.

Ref: https://github.com/containers/podman/pull/17383

Signed-off-by: Chris Evich <cevich@redhat.com>
2023-02-07 11:23:39 -05:00
OpenShift Merge Robot
56856b0163
Merge pull request #17360 from openshift-cherrypick-robot/cherry-pick-17331-to-v4.4
[v4.4] make hack/markdown-preprocess parallel-safe
2023-02-06 10:48:40 +01:00
OpenShift Merge Robot
39ec022cae
Merge pull request #17361 from openshift-cherrypick-robot/cherry-pick-17343-to-v4.4
[v4.4] test: adapt test to work on cgroupv1
2023-02-05 13:50:44 +01:00
Giuseppe Scrivano
7407ccdc37 test: adapt test to work on cgroupv1
when running on a cgroupv1 host validate that the memory controller is
mounted ro.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-02-03 22:33:05 +00:00
Ed Santiago
c2971a66a0 make hack/markdown-preprocess parallel-safe
One of the tmpfiles was not uniquely named, resulting in
conflicts with parallel 'make docs'. Fix that.

A better solution would be to run only one instance of the
preprocess script, but the Makefile incantation for that
is beyond me. This approach is CPU-wasteful but good enough.

Fixes: #17322

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-02-03 22:09:35 +00:00
OpenShift Merge Robot
9c5b249e12
Merge pull request #17355 from openshift-cherrypick-robot/cherry-pick-17262-to-v4.4
[v4.4] Fix default handling of pids-limit
2023-02-03 22:34:49 +01:00
Jason T. Greene
322802e409 Fix default handling of pids-limit
Add test to verify that updates without a pids-limit specified no longer
overwrite the previous value.

Also fixes erroneous warning generated by remote clients:

"Resource limits are not supported and ignored on cgroups V1 rootless
systems"

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2023-02-03 16:13:22 +00:00
OpenShift Merge Robot
3988540467
Merge pull request #17344 from openshift-cherrypick-robot/cherry-pick-17327-to-v4.4
[v4.4] system tests: fix volume exec/noexec test
2023-02-03 11:00:26 +01:00
Toshiki Sonoda
6ce1a11b7f system tests: fix volume exec/noexec test
The return code is "126" in the current version of runc.

Signed-off-by: Toshiki Sonoda <sonoda.toshiki@fujitsu.com>
2023-02-02 18:51:38 +00:00
OpenShift Merge Robot
33574f5dec
Merge pull request #17314 from ashley-cui/440f
Bump to v4.4.0
2023-02-01 23:44:36 +01:00
Ashley Cui
e2a40dfa2f Bump to v4.4.1-dev
Signed-off-by: Ashley Cui <acui@redhat.com>
2023-02-01 15:00:21 -05:00
Ashley Cui
3443f453e2
Bump to v4.4.0
Signed-off-by: Ashley Cui <acui@redhat.com>
2023-02-01 14:59:39 -05:00
Ashley Cui
f429727143 Final release notes for v4.4.0
Signed-off-by: Ashley Cui <acui@redhat.com>
2023-02-01 14:59:11 -05:00
OpenShift Merge Robot
cd73289361
Merge pull request #17301 from giuseppe/4.4-fix-tty
[4.4] fix regression with runc --privileged rootless containers
2023-02-01 17:53:52 +01:00
OpenShift Merge Robot
0e446a3768
Merge pull request #17311 from edsantiago/rhel8_systemd_has_no_dash_P
Emergency fix for RHEL8 gating tests
2023-02-01 16:29:33 +01:00
Ed Santiago
c927ad03b9 Emergency fix for RHEL8 gating tests
...because systemd on RHEL8 is too old, has no -P

Signed-off-by: Ed Santiago <santiago@redhat.com>
2023-02-01 07:29:30 -07:00
OpenShift Merge Robot
19890bc1e8
Merge pull request #17299 from openshift-cherrypick-robot/cherry-pick-17291-to-v4.4
[v4.4] [NO NEW TESTS NEEDED] Fixes port collision issue on use of --publish-all
2023-02-01 15:16:02 +01:00
Martin Roukala (né Peres)
ef4e7b8c73
Do not mount /dev/tty into rootless containers
[NO NEW TESTS NEEDED]

Closes: https://bugzilla.redhat.com/show_bug.cgi?id=2165875
Signed-off-by: Martin Roukala (né Peres) <martin.roukala@mupuf.org>
(cherry picked from commit d10860a323)
2023-01-31 22:59:29 +01:00
OpenShift Merge Robot
9a2cc4f00f
Merge pull request #17275 from openshift-cherrypick-robot/cherry-pick-16807-to-v4.4
[CI:DOCS] [v4.4] Add gvproxy to windows packages
2023-01-31 16:22:39 -05:00
telday
bbaa542589 Fixes port collision issue on use of --publish-all
The function which generates and assigns a random
port number for the --publish-all functionality
was not properly marking some ports as "used".
In very rare occasions this can cause a randomly
"generated" port to be used twice creating an
impossible container configuration.

Signed-off-by: telday <ellis.wright@cyberark.com>
2023-01-31 15:18:25 +00:00
OpenShift Merge Robot
e7878726f6
Merge pull request #17289 from n1hility/fix-image-path-v4.4
[v4.4] Fix usage of absolute windows paths with --image-path
2023-01-31 04:25:10 -05:00
Daniel J Walsh
ecea61375f
Merge pull request #17277 from openshift-cherrypick-robot/cherry-pick-17273-to-v4.4
[v4.4] [DOCS:CI] podman-events: document verbose create events
2023-01-30 18:28:33 -05:00
Jason T. Greene
c3566cda41 Fix usage of absolute windows paths with --image-path
Only assume that http(s) scheme URLs (only ones supported by http.Client anyway) are URLs.
Treat everything else as a file path. (Windows paths can look like a URL scheme)

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2023-01-30 14:34:53 -06:00
OpenShift Merge Robot
1878d04f8e
Merge pull request #17280 from vrothberg/cherry-pick-17264-to-v4.4
[v4.4] fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
2023-01-30 10:56:55 -05:00
nabbisen
9eb9607076 fix #17244: use /etc/timezone where timedatectl is missing on Linux
[NO NEW TESTS NEEDED]

Signed-off-by: nabbisen <nabbisen@scqr.net>
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-01-30 14:38:06 +01:00
Valentin Rothberg
5c94568e92 podman-events: document verbose create events
issues.redhat.com/browse/RHELBU-1918 is mentioning the podman-events man
page which are lacking notes on the verbose create events added by
commit 71f92d263c.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-01-30 11:59:32 +00:00
Arthur Sengileyev
45b00b648f Making gvproxy.exe optional for building Windows installer
Signed-off-by: Arthur Sengileyev <arthur.sengileyev@gmail.com>
2023-01-30 11:28:52 +00:00
Arthur Sengileyev
63f964c08b Add gvproxy to Windows packages
Updated build scripts and installer build scripts to include gvproxy.exe.
Includes tutorial on setting up a Podman VM with QEMU and gvproxy on Windows.

Signed-off-by: Arthur Sengileyev <arthur.sengileyev@gmail.com>
2023-01-30 11:28:52 +00:00
OpenShift Merge Robot
871c67c654
Merge pull request #17272 from openshift-cherrypick-robot/cherry-pick-17265-to-v4.4
[v4.4] Match VT device paths to be blocked from mounting exactly
2023-01-30 05:10:13 -05:00