7528 commits

Author	SHA1	Message	Date
Matt Heon	05b3b7220b	Merge pull request #29159 from jiwahn/fix-kube-seccomp-profile ... kube: use native seccompProfile fields	2026-08-13 21:55:50 -04:00
Brent Baude	3c2f492e87	Merge pull request #29509 from ROKUMATE/fix-trust-parseuids-panic ... pkg/trust: prevent panic on malformed GPG uid/pub lines	2026-08-13 14:48:52 -05:00
ROKUMATE	d212fc842d	pkg/trust: prevent panic on malformed GPG uid/pub lines ... Fixes: #29508 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-13 23:51:56 +05:30
Jiwoo Ahn	bf8df1f057	kube: use native seccompProfile fields ... Fixes: #27501 Signed-off-by: Jiwoo Ahn <ikwydls1314@gmail.com>	2026-08-13 16:54:23 +09:00
Vishnu Kothakapu	82c44cdcaa	Refactor: Replace static fmt.Errorf with errors.New in pkg/systemd ... Signed-off-by: Vishnu Kothakapu <vishnukothakapu27@gmail.com>	2026-08-12 22:21:04 +05:30
Matt Heon	cbd17f7459	Merge pull request #29473 from ROKUMATE/swagger-checkpoint-createimage ... pkg/api: document the createImage checkpoint query parameter	2026-08-12 10:26:11 -04:00
ROKUMATE	944fa71129	pkg/api: document the createImage checkpoint query parameter ... Fixes: #29472 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-12 17:33:54 +05:30
Matt Heon	b85a2c7f39	Merge pull request #29459 from vishnukothakapu/refactor-machine-error-wrap ... Refactor: use %w for error wrapping in pkg/machine	2026-08-12 06:27:23 -04:00
Matt Heon	0d43350b9c	Merge pull request #29466 from ROKUMATE/fix-machine-volume-unknown-opt-log ... pkg/machine/vmconfigs: log unknown volume option instead of printing to stdout	2026-08-11 19:27:13 -04:00
ROKUMATE	d591b83fce	pkg/machine/vmconfigs: log unknown volume option instead of printing to stdout ... Fixes: #29465 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-12 03:41:19 +05:30
Vishnu Kothakapu	2dac3a97fb	Refactor: use %w for error wrapping in pkg/machine ... Signed-off-by: Vishnu Kothakapu <vishnukothakapu27@gmail.com>	2026-08-12 02:23:44 +05:30
Paul Holzinger	6bf6a37555	Merge pull request #29289 from satwiksps/fix-swagger-warnings ... swagger: fix deprecated alias annotations and model name collisions	2026-08-11 14:59:43 +02:00
Paul Holzinger	2ab2dbfa55	Merge pull request #29282 from ROKUMATE/test-pkg-channel ... pkg/channel: add tests for the channel WriteCloser	2026-08-11 14:57:22 +02:00
Jan Rodák	6394caebcd	Merge pull request #29417 from sahilnyk/quadlet-umask ... quadlet: add Umask= key to set container umask without PodmanArgs	2026-08-11 14:05:30 +02:00
Satwik Sai Prakash Sahoo	05929acd90	swagger: fix deprecated alias annotations and model name collisions ... Replace deprecated swagger:alias with swagger:model for ImagePullStatus and ArtifactPullStatus. Add explicit swagger:model annotations with unique names to Podman types that collide with vendor types (DriverData, PruneReport, RootFS, Secret, ThrottleDevice, WeightDevice, Version) to resolve colliding model name warnings from go-swagger. The types from libpod/define use a Libpod prefix, matching LibpodInfo which already does that. Apart from the prefix the names are the ones go-swagger derives on its own, so the annotations mostly just make the naming explicit so the tool stops warning about it. This does not close #29199 entirely. The two remaining name collisions (Mount and Summary) are each between two vendored types, so they cannot be controlled from the Podman side, and the dropped-ref-sibling warnings are a separate problem. Related: #29199 Signed-off-by: Satwik Sai Prakash Sahoo <sahoospsatwik@gmail.com>	2026-08-10 22:14:47 +05:30
Riccardo Paolo Bestetti	86d1507130	set up default IDMappings when none are set and userns=auto ... Signed-off-by: Riccardo Paolo Bestetti <pbl@bestov.io>	2026-08-10 17:52:03 +02:00
Salih Muhammed	aec2f54ec6	quadlet: expand %N specifier in the Pod key ... The Pod key of a .container unit accepts systemd specifiers, but handlePod looked the referenced pod up in the units map using the raw value, so "Pod=%N.pod" failed with "quadlet pod unit %N.pod does not exist" instead of resolving to the pod named after the container's service. Expand %N to the container's service name before the lookup, matching the existing handling in GetContainerResourceName. Since %N is the service name, setting ServiceName= lets the container and pod unit files use different names. Add e2e cases for both combinations: a pod named after the container file, and a pod named after a ServiceName that differs from the file name. Fixes: #29108 Signed-off-by: Salih Muhammed <root@lr0.org>	2026-08-09 04:23:53 -04:00
Matt Heon	55c2d1c490	Merge pull request #25161 from danishprakash/empty-ignore-file ... build: pass ignore file to buildah to consider empty ignore files	2026-08-07 07:57:30 -04:00
Sahil Nayak	bda5521804	quadlet: add Umask= key to set container umask without PodmanArgs ... Fixes: #25278 Co-authored-by: Tom Sweeney <tsweeney@redhat.com> Signed-off-by: Sahil Nayak <contactsahilpnayak@gmail.com>	2026-08-07 16:17:35 +05:30
Matt Heon	0ad5459fab	Merge pull request #29145 from ROKUMATE/feat-playkube-warn-unknown-keys ... podman kube play: add --validate=ignore|warn|strict flag	2026-08-06 18:21:03 -04:00
Matt Heon	615e69fdb6	Merge pull request #29300 from prayag0one4/fix/issue-3-volumes-mountcount ... volumes: propagate error from MountCount in VolumeMounted	2026-08-05 20:43:00 -04:00
Matt Heon	90f7fdfe8f	Merge pull request #29336 from Aryanbhargava18/fix/mac-provider-test-flake ... pkg/machine: remove unused InstalledProviders function	2026-08-05 11:07:55 -04:00
ROKUMATE	0d09e609e4	add validate flag to podman kube play ... ignore warn and strict modes for unknown yaml fields and kinds ignore is the default and skips them warn reports them strict fails warnings are returned in the play report so they show up in the cli and over the api for tools like podman desktop Closes #18332 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-05 17:42:40 +05:30
Matt Heon	de06abeb56	Merge pull request #29327 from aiburegit/main ... rootless: fix heap-buffer-overflow in preexec hooks	2026-08-04 20:42:07 -04:00
Aryanbhargava18	c8e8cb23cc	pkg/machine: remove unused provider functions ... The InstalledProviders and SupportedProviders functions were only used in their own tests and were otherwise dead code. Removing them entirely cleans up the API surface. Signed-off-by: Aryanbhargava18 <aryanbhargava644@gmail.com>	2026-08-04 15:09:41 +05:30
Artem Krasovskiy	f8b059fed9	rootless: fix heap-buffer-overflow in preexec hooks ... Remove an unnecessary null byte write after copying preexec hook names. The write was performed one byte past the allocated buffer because the filename copy already included the string terminator. Signed-off-by: Artem Krasovskiy <aibure@altlinux.org>	2026-07-29 10:27:49 +03:00
Rajkaran	2f9f412822	Merge branch 'podman-container-tools:main' into fix-swagger-artifact-annotations	2026-07-28 16:38:34 +05:30
Rajkaran Yadav	7018130ef8	swagger: rename artifact annotation field" ... Signed-off-by: Rajkaran Yadav <yadavrajkaran854@gmail.com>	2026-07-28 16:15:35 +05:30
Paul Holzinger	8abafe40fc	Merge pull request #29228 from ashley-cui/is-automated ... Docker compat v1.45 : deprecate is-automated field	2026-07-28 12:39:25 +02:00
prayag0one4	16535cdecb	volumes: propagate MountCount error upwards ... When volume.MountCount() fails, we shouldn't silence the error and return that the volume is unmounted. This can hide potential volume state corruption. Propagate the error upwards so that the client/CLI can handle it correctly. Signed-off-by: prayag0one4 <prayag0one4@users.noreply.github.com>	2026-07-26 22:40:32 +05:30
ROKUMATE	e47f36b864	pkg/channel: add tests for the channel WriteCloser ... Fixes: #29281 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-07-25 17:11:50 +05:30
Ashley Cui	59af9c81e5	Docker compat v1.45 : deprecate is-automated field ... searching for is-automated=true will yield no results, while is-automated=false will be a no-op Signed-off-by: Ashley Cui <acui@redhat.com>	2026-07-24 14:46:48 -04:00
Paul Holzinger	cc8c07d72b	Merge pull request #29230 from i-OmSharma/fix-kube-generate-selinux-note ... fix(kube): gate SELinux volume warning note on host SELinux state	2026-07-24 14:07:32 +02:00
i-OmSharma	cfd3a3f7ba	kube generate: gate SELinux volume NOTE on host state and rootless ... The SELinux volume-permissions NOTE only applies to unprivileged, rootless containers on an SELinux-enabled host. Emit it only when both conditions hold, instead of on every volume-bearing object. Add an e2e case generating from a standalone container with a volume, asserting the NOTE appears only when rootless and SELinux is enabled. Fixes: #17743 Signed-off-by: i-OmSharma <sharmaom1201@gmail.com>	2026-07-22 14:21:01 +05:30
Danish Prakash	e121ed6264	Merge pull request #28687 from jaitjacob/add-podman-machine-restart-command ... Add `podman machine restart` subcommand	2026-07-22 09:53:10 +05:30
Jait Jacob	eb26516dba	make return explicit so CleanIfErr runs as expectd ... Signed-off-by: Jait Jacob <jai8.jacob@gmail.com>	2026-07-21 23:30:29 +05:30
zjuzhongwen	2c8a7acbeb	chore: fix some comments to improve readability ... Signed-off-by: zjuzhongwen <zjuzhongwen@outlook.com>	2026-07-19 22:18:33 +08:00
Paul Holzinger	c7444c9d5a	Merge pull request #29115 from l0rd/wsl-host-containers-internal-test ... Add a machine e2e test to test connection to `host.containers.internal`	2026-07-17 11:52:20 +02:00
Jait Jacob	2ad3a79631	Add podman machine restart subcommand ... Signed-off-by: Jait Jacob <jai8.jacob@gmail.com>	2026-07-16 21:51:11 +05:30
Mario Loriedo	452c40a1b6	Add machine e2e test for host.containers.internal ... Add one more test to the basic podman commands e2e tests: - starts an HTTP server on the host - verify HTTP requests from a container, using `host.containers.internal` or `host.docker.internal`, are routed successfully to the server running on the host Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com> test Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-07-16 14:33:18 +02:00
Jan Rodák	bb4695870e	Merge pull request #28984 from stefan8/test/apiv2-manifest-create-images-query ... test: add apiv2 coverage for the manifest-create images query param	2026-07-15 13:10:40 +02:00
Mario Loriedo	48f21de496	Fixing machine e2e gvproxy test ... The lookup for the gvproxy process was broken on Windows: - We looked for gvproxy, not gvproxy.exe, and `tasklist` was always failing - But `pgrep` wasn't failing because we looked for the wrong `tasklist` error message (the correct error message on my laptop is "INFO: No tasks are running which match the specified criteria.") - WSL uses win-sshproxy.exe, not gvproxy.exe Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-07-15 11:42:11 +02:00
Brent Baude	f954cf86aa	Merge pull request #29161 from l0rd/fix-wsl-init-in-case-of-err ... Always unprovision if the WSL machine init fail	2026-07-13 10:00:11 -05:00
Miloslav Trmač	3fc3288714	Merge pull request #29098 from ROKUMATE/test-pkg-specgenutilexternal ... pkg/specgenutilexternal: add tests for FindMountType	2026-07-13 15:41:52 +02:00
Mario Loriedo	d20b363e02	Always unprovision if the WSL machine init fail ... Remove the just provisioned WSL distribution if one of the post install scripts fail. Fixes #27036 Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>	2026-07-13 14:07:17 +02:00
Miloslav Trmač	9db0119d00	Merge pull request #28787 from simek-m/docker-api-144-deprecations ... compat: Implement deprecations from Docker API v1.44	2026-07-08 18:43:53 +02:00
Marek Simek	463b0b9829	api: Deprecate fields Container and ContainerConfig from GET /images/{name}/json ... The Docker API deprecates Container and ContainerConfig fields in the GET /images/{name}/json response are deprecated and they will no longer be included in API v1.45. Fixes: https://redhat.atlassian.net/browse/RUN-3323 Signed-off-by: Marek Simek <msimek@redhat.com>	2026-07-08 17:31:02 +02:00
Marek Simek	612c7b71b4	api: Deprecate response fields from GET /containers/{id}/json ... The Docker API 1.44 deprecates the fields HairpinMode, LinkLocalIPv6Address, LinkLocalIPv6PrefixLen, SecondaryIPAddresses, SecondaryIPv6Addresses available in NetworkSettings when calling GET /containers/{id}/json and will be removed in a future release. You should instead look for the default network in NetworkSettings.Networks. The fields are removed in 1.52. Version gate SecondaryIPAddresses, SecondaryIPv6Addresses in the handler and update test. HairpinMode, LinkLocalIPv6Address, LinkLocalIPv6PrefixLen are not returned by the compat endpoint as the response is serialized to the moby/moby/api structure missing these fields. Fixes: https://redhat.atlassian.net/browse/RUN-3323 Signed-off-by: Marek Simek <msimek@redhat.com>	2026-07-08 17:31:02 +02:00
Marek Simek	f4925bae8c	api: Deprecate is-automated filter and field in GET /images/search endpoint ... The Docker API in version 1.44 deprecates the is_automated field for the GET /images/search endpoint. The is_automated field has been deprecated by Docker Hub's search API. Consequently, searching for is-automated=true will yield no results. The Docker API in version 1.44 deprecates the is_automated field in the GET /images/search response and will always be set to false in the future because Docker Hub is deprecating the is_automated field in its search API. Return struct moby/api for the compat endpoint that matches the Docker API response format and deprecates is_automated. Update test_v2_0_0_image.py::ImageTestCase::test_search_compat to verify returned format and fix subtests not being asserted (remove mp). Fixes: https://redhat.atlassian.net/browse/RUN-3323 Signed-off-by: Marek Simek <msimek@redhat.com>	2026-07-08 17:31:02 +02:00
Danish Prakash	490486e727	Merge pull request #28953 from ROKUMATE/test-pkg-namespaces ... pkg/namespaces: add tests for UsernsMode and NetworkMode	2026-07-08 20:56:14 +05:30