7916 commits

Author	SHA1	Message	Date
Jan Rodák	4edc8d68e3	Merge pull request #29484 from ellieayla/artifact-list-json-output ... feat: Add output format: podman artifact ls --format=json	2026-08-19 17:41:01 +02:00
ellieayla	f596bb7a73	feat: Add output format: podman artifact ls --format=json ... The 'podman artifact ls' command supports a --format flag accepting a go template string. Some commands (eg 'podman image ls') accept a --format=json parameter, and export pure json object to stdout. This change adds a --format=json output mode to artifact lists too. Includes simple documentation mention of --format=json option alongside go template description. Signed-off-by: ellieayla <1447600+me@users.noreply.github.com>	2026-08-19 10:18:10 -04:00
Paul Holzinger	768072c6a8	Merge pull request #29572 from dexp007/main ... compat/secrets: do not expose secret data on inspect endpoint	2026-08-19 15:55:51 +02:00
Lokesh Mandvekar	4451a3f7b9	Merge pull request #29569 from vtushar06/fix-skip-aarch64-msg ... test/system: pass skip_if_aarch64 its message	2026-08-19 08:48:09 -04:00
Davoud Azari	b57e7075e2	compat/secrets: do not expose secret data on inspect endpoint ... The Docker-compat secret inspect endpoint was incorrectly honoring the showsecret query parameter, which could expose plaintext secret data to clients using the Docker-compatible API. This restricts showsecret to libpod-only requests. Docker-compat clients always receive redacted secret data, matching Docker's own behavior. Add APIv2 tests covering the showsecret behavior on both the Docker-compat and libpod endpoints, confirming secret data is never returned from the compat endpoint while libpod continues to honor the flag. Fixes: #29570 Signed-off-by: Davoud Azari <davidmotral@gmail.com>	2026-08-19 14:30:37 +03:30
Jan Rodák	c21fb45ac8	Merge pull request #29378 from danishprakash/fix-farm-build-tag ... farm: handle tagged --tag references on build	2026-08-19 09:55:37 +02:00
Danish Prakash	5745ac69e0	farm: handle tagged --tag references on build ... podman farm build pushes each per-arch image to the registry by appending `UnknownDigestSuffix` to the image specified using --tag. This fails because a tag is not expected when UnknownDigestSuffix is used. Parse the image reference and pass only the untagged image reference when podman does this suffixed push to the registry. Fixes #25039 Co-authored-by: Kevin Crocombe <kevin.crocombe@pegortech.co.uk> Signed-off-by: Danish Prakash <contact@danishpraka.sh>	2026-08-19 12:44:54 +05:30
Paul Holzinger	4d055045e5	Merge pull request #29489 from ashley-cui/tmpfs ... Compat v1.46: support HostConfig.Mounts.TmpfsOptions for containers/create	2026-08-18 15:37:15 +02:00
Tushar Verma	085e4baac9	test/tmt: raise system test duration to 60m ... Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-18 16:10:56 +05:30
Matt Heon	db8802b1a3	Merge pull request #29536 from umar11b/farm-list-quiet ... farm: add --quiet/-q flag to podman farm list	2026-08-17 16:23:19 -04:00
Tushar Verma	e60c112f34	test/system: pass skip_if_aarch64 its message ... Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-17 23:31:41 +05:30
Tushar Verma	de8c356969	test/buildah-bud: drop PODBIN_NAME indirection ... Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-17 16:29:57 +05:30
umar11b	db6edf74c8	farm: add --quiet/-q flag to podman farm list ... The farm command is helpful when it comes to building multi-architecture container images, with a build out on various different CPU architecture machines (e.g. amd64, arm64 etc). This produces a multi-architecture image usable on many different kinds of machines. Once those farms are built, we can list them out (ls) in a human readable format. Currently, podman farm list prints out every field (name, connections, default, etc). The --quiet/-q flags cut the noise by only printing the names of the farms, rather than all the other farm list metadata. The benefit of having this feature is for automation and scripts to pull just the farm names from the list, which is mostly important for CI pipelines to loop over. Signed-off-by: umar11b <uzaman2018@gmail.com>	2026-08-15 20:52:18 -04:00
Ashley Cui	8e63c695f2	Compat v1.46: Support HostConfig.Mounts.TmpfsOptions for containers/create ... POST /containers/create now takes Options as part of HostConfig.Mounts.TmpfsOptions to set options for tmpfs mounts. Signed-off-by: Ashley Cui <acui@redhat.com>	2026-08-14 21:14:49 -04:00
Paul Holzinger	d9e33ce2df	Merge pull request #29519 from vtushar06/healthcheck-since-race ... test/system: fix healthcheck since race	2026-08-14 17:08:18 +02:00
Tushar Verma	4ff63d8d54	test/system: fix healthcheck since race ... The unhealthy wait polls podman events with a --since that is captured after the touch which triggers the failing checks. With a 1s interval the third failure can fire while the "First failure" checks above are still running, so the window opens after the only unhealthy event that will ever exist. Journal artifacts from two failed jobs show the event firing 19ms and 60ms before the captured timestamp. 81fceb48d moved this capture earlier for the same reason but left it after the trigger. Reuse the timestamp taken before the touch instead. The wait loop only matches the last event so the wider window is safe, and the assertion table already accepts FailingStreak 3-6. Fixes: #29353 Signed-off-by: Tushar Verma <tusharmyself06@gmail.com>	2026-08-14 19:24:56 +05:30
Matt Heon	28f33cbad1	Merge pull request #29352 from aryannishad-86/fix-play-kube-nginx-image ... test/e2e: fix remaining hardcoded alpine_nginx reference in play_kube_test.go	2026-08-14 09:28:20 -04:00
Jan Rodák	cb7553bade	Merge pull request #29494 from nXtCyberNet/issue/ci ... added errorlint	2026-08-14 15:02:05 +02:00
Matt Heon	05b3b7220b	Merge pull request #29159 from jiwahn/fix-kube-seccomp-profile ... kube: use native seccompProfile fields	2026-08-13 21:55:50 -04:00
nXtCyberNet	f76d9de01a	added errorlint ... Fixes: #29488 Signed-off-by: nXtCyberNet <rohantech2005@gmail.com>	2026-08-14 01:35:03 +05:30
Aryan Nishad	702b6a1f0e	test/e2e: use NGINX_IMAGE var instead of hardcoded image in play_kube_test.go ... The "podman kube --quiet with error" test hardcoded quay.io/libpod/alpine_nginx:latest directly inside a YAML string instead of using the NGINX_IMAGE constant, which is already defined per architecture. This instance was missed in commit cd2f122, which fixed the same pattern in five other tests in this file, because it used a raw inline literal rather than the variable. Signed-off-by: Aryan Nishad <157164036+aryannishad-86@users.noreply.github.com>	2026-08-13 22:51:23 +05:30
Paul Holzinger	ee19baad21	Merge pull request #29258 from mdiniz97/fix-25362-config-log-level ... Ensure log level is applied before loading configuration	2026-08-13 15:40:14 +02:00
Marcos Paulo Diniz	18e1154e73	fix(config): apply log level before loading ... Podman loads containers.conf before Cobra processes global flags, hiding debug and trace diagnostics emitted during configuration parsing. Parse early CLI options once so logging is configured first, then reuse the result for modules and remote-mode selection. Fixes: #25362 Signed-off-by: Marcos Paulo Diniz <marcosdinizpaulo@gmail.com>	2026-08-13 09:24:37 -03:00
Jiwoo Ahn	bf8df1f057	kube: use native seccompProfile fields ... Fixes: #27501 Signed-off-by: Jiwoo Ahn <ikwydls1314@gmail.com>	2026-08-13 16:54:23 +09:00
Paul Holzinger	4c1f8f267b	Merge pull request #29301 from vtushar06/ci-desired-runtime-storage ... hack/ci: rename STORAGE_FS to CI_DESIRED_STORAGE and add PODMAN_CI	2026-08-12 17:56:22 +02:00
Paul Holzinger	5776f8388e	Merge pull request #29451 from Luap99/config-port ... libpod: implement force_port_listen containers.conf option	2026-08-12 13:23:59 +02:00
Paul Holzinger	81f901a9e4	Merge pull request #29440 from Honny1/endable-passta-tests ... Re-enable pesto IPv6 forwarding tests	2026-08-12 11:26:22 +02:00
Paul Holzinger	cc762db629	libpod: implement force_port_listen containers.conf option ... While we do not want to use listen() by default for bound ports it seems it is needed in some special cases such as WSL, see https://github.com/podman-container-tools/podman/issues/29377 Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-08-12 11:21:39 +02:00
Danish Prakash	4384c6cffa	Merge pull request #29290 from satwiksps/ci-reenable-farm-tests ... CI: re-enable farm tests in GitHub Actions	2026-08-12 14:05:58 +05:30
Jan Rodák	1ef3bd6058	Re-enable pesto IPv6 forwarding tests ... The pasta IPv6 local-mode fix has been released upstream. Fixes: https://github.com/podman-container-tools/podman/issues/29268 Signed-off-by: Jan Rodák <hony.com@seznam.cz>	2026-08-12 10:23:55 +02:00
Paul Holzinger	aa23b5adff	Merge pull request #29450 from podman-container-tools/renovate/major-ci-vm-image ... Update dependency podman-container-tools/automation to v20260811	2026-08-11 18:51:08 +02:00
Paul Holzinger	10b0bc1deb	Merge pull request #29341 from Aryanbhargava18/fix/healthcheck-flake-2 ... test/e2e: fix and re-enable healthcheck run test flake	2026-08-11 18:21:56 +02:00
Paul Holzinger	df88783042	test/NEW-IMAGES: remove volume-plugin-test-img ... It is not part of the VM image so we no longer need this. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-08-11 17:45:24 +02:00
Brent Baude	0c179631cc	Merge pull request #29433 from podman-container-tools/renovate/setuptools-84.x ... Update dependency setuptools to v84	2026-08-11 08:07:41 -05:00
Jan Rodák	6394caebcd	Merge pull request #29417 from sahilnyk/quadlet-umask ... quadlet: add Umask= key to set container umask without PodmanArgs	2026-08-11 14:05:30 +02:00
Giuseppe Scrivano	49e4020add	Merge pull request #29446 from Atishyy27/fix-tagoutputtomap-panic-v2 ... test/utils: handle empty image output	2026-08-11 12:22:15 +02:00
Giuseppe Scrivano	36e2d12650	Merge pull request #27988 from vmsh0/idmappings_defaults ... set up default IDMappings when none are set and userns=auto	2026-08-11 09:00:11 +02:00
Atishay Jain	f8b6c23caa	test/utils: handle empty image output ... Handle empty image output before skipping the header row in tagOutputToMap. This prevents a slice bounds panic when imagesOutput is empty and adds coverage for the empty-output case. Signed-off-by: Atishay Jain <sethatishayjain@gmail.com>	2026-08-11 03:19:13 +05:30
Matt Heon	2ded88e563	Merge pull request #29302 from prayag0one4/fix-testvol-mount-check ... testvol: return error in Path endpoint when volume is unmounted	2026-08-10 13:03:22 -04:00
Satwik Sai Prakash Sahoo	25f72c5842	CI: re-enable farm tests in GitHub Actions ... Farm tests were skipped during the Cirrus-to-GHA migration. Re-enable them by adding a run_farm() function in runner.sh which starts the rootless podman socket that the farm node connection talks to, and by adding farm to the small-tests matrix so that it runs rootless on fedora-current. A path filter makes it trigger on test/farm/ or shared system test helper changes. Also stop test/farm/setup_suite.bash from assuming that the rootless user's home directory is /home/$ROOTLESS_USER, which does not hold on the CI VMs. Fixes: #28833 Signed-off-by: Satwik Sai Prakash Sahoo <sahoospsatwik@gmail.com>	2026-08-10 21:58:28 +05:30
Riccardo Paolo Bestetti	86d1507130	set up default IDMappings when none are set and userns=auto ... Signed-off-by: Riccardo Paolo Bestetti <pbl@bestov.io>	2026-08-10 17:52:03 +02:00
Riccardo Paolo Bestetti	020e02d4a6	return usernsmode=private for created containers with userns=auto ... Signed-off-by: Riccardo Paolo Bestetti <pbl@bestov.io>	2026-08-10 14:30:43 +02:00
Salih Muhammed	aec2f54ec6	quadlet: expand %N specifier in the Pod key ... The Pod key of a .container unit accepts systemd specifiers, but handlePod looked the referenced pod up in the units map using the raw value, so "Pod=%N.pod" failed with "quadlet pod unit %N.pod does not exist" instead of resolving to the pod named after the container's service. Expand %N to the container's service name before the lookup, matching the existing handling in GetContainerResourceName. Since %N is the service name, setting ServiceName= lets the container and pod unit files use different names. Add e2e cases for both combinations: a pod named after the container file, and a pod named after a ServiceName that differs from the file name. Fixes: #29108 Signed-off-by: Salih Muhammed <root@lr0.org>	2026-08-09 04:23:53 -04:00
renovate[bot]	92dc67ea3d	Update dependency setuptools to v84 ... Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2026-08-08 20:26:03 +00:00
Paul Holzinger	a5c3046135	test/e2e: update quay.io/libpod/volume-plugin-test-img ... Use a new image I build which is also multi-arch so we can remove the test skip. Fixes: #28270 Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-08-07 15:42:44 +02:00
Paul Holzinger	e3b0409e5d	test/testvol: fix build ... Building without go modules fails as we use different import paths now. But also there is no reason to to use GO111MODULE=off anymore so just remove it to make the build work. Signed-off-by: Paul Holzinger <pholzing@redhat.com>	2026-08-07 15:30:56 +02:00
Prayag	bf8feb87c1	testvol: return error in Path endpoint when volume is unmounted ... Check if volume has active mounts in Path() endpoint and return an error if unmounted, resolving TODO. Signed-off-by: Prayag <rajprayag014@gmail.com>	2026-08-07 15:17:46 +02:00
Matt Heon	55c2d1c490	Merge pull request #25161 from danishprakash/empty-ignore-file ... build: pass ignore file to buildah to consider empty ignore files	2026-08-07 07:57:30 -04:00
Sahil Nayak	bda5521804	quadlet: add Umask= key to set container umask without PodmanArgs ... Fixes: #25278 Co-authored-by: Tom Sweeney <tsweeney@redhat.com> Signed-off-by: Sahil Nayak <contactsahilpnayak@gmail.com>	2026-08-07 16:17:35 +05:30
Matt Heon	0ad5459fab	Merge pull request #29145 from ROKUMATE/feat-playkube-warn-unknown-keys ... podman kube play: add --validate=ignore|warn|strict flag	2026-08-06 18:21:03 -04:00