Commit graph

25966 commits

Author SHA1 Message Date
Matthew Heon
62c0b387f5 Set log-level immediately, before rootless setup
If we don't do this, we print WARN level messages that we should
not be printing by default.

Up one WARN message to ERROR so it still shows up by default.

Fixes: #4115
Fixes: #4012

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-26 16:14:57 -04:00
Chris Evich
e122c24c36
Cirrus: Implement newly built VM images
Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-26 14:54:27 -04:00
OpenShift Merge Robot
851e3775d5
Merge pull request #4117 from mheon/pod_no_name
Add an error for pods without a name
2019-09-26 19:58:32 +02:00
Matthew Heon
080abfd222 Add README note about security reporting process.
Signed-off-by: Matthew Heon <mheon@redhat.com>
2019-09-26 13:04:55 -04:00
Chris Evich
8368a894ba
Cirrus: Disable boottime Ubuntu package update
Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-26 12:36:33 -04:00
Chris Evich
437d9d2cde
Move noCache logic lower in stack
One or more tests are not taking advantage of the local image cache.
This has been observed to cause a testing flake in at least one
`--sigproxy` test which uses `PodmanTestIntegration.PodmanPID()`.
It has a rather short timeout of 15-seconds, which isn't always
enough time to pull down a remote image.

Fix this by reloacing the `noCache` logic from
`PodmanTest.PodmanAsUserBase()` down the stack into
`PodmanTestIntegration.makeOptions()`.  This also eliminates the need to
also check if a remote-client is being used - since it uses a different
function.

Also reverse the parameter order in `PodmanTest.PodmanBase` so that
everywhere is consistently `noEvents` then `noCache`.

Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-26 10:56:24 -04:00
Chris Evich
b9e21af44f
cirrus: Add bash-completion support
This is fairly standard thing to have on a user's workstation, supported
by podman.  When installed in a VM image, then it's useful for debugging
with `hack/get_ci_vm.sh` at the cost of a minor increase in disk-space.

Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-26 09:58:16 -04:00
Matthew Heon
0cae686c7f Add an error for pods without a name
Signed-off-by: Matthew Heon <mheon@redhat.com>
2019-09-26 09:39:01 -04:00
TomSweeneyRedHat
34ef662f9e Make links relative in Tutorial README
Remove the longer html link in favor or relative links
which are shorter and less error prone.

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2019-09-26 09:22:58 -04:00
OpenShift Merge Robot
d76b21e27a
Merge pull request #4109 from cgwalters/doc-custom-project
docs/podman-derivative-api.md: New file
2019-09-26 15:15:17 +02:00
Colin Walters
af00094558 docs/podman-derivative-api.md: New file
https://github.com/debarshiray/toolbox/ was planning to vendor
libpod which I disagreed with.  Let's document the advantages/disadvantages
as they exist today.

Signed-off-by: Colin Walters <walters@verbum.org>
2019-09-26 12:06:40 +00:00
OpenShift Merge Robot
3ed265c520
Merge pull request #4101 from QiWang19/nonexistdir
fix cp none exists dest path ends with '/'
2019-09-25 23:38:55 +02:00
OpenShift Merge Robot
19075ca16e
Merge pull request #4104 from mheon/bump-1.6.0-rc2
Bump to 1.6.0-rc2
2019-09-25 20:44:13 +02:00
Marco Vedovati
dacbc5beb2 rm: add containers eviction with rm --force
Add ability to evict a container when it becomes unusable. This may
happen when the host setup changes after a container creation, making it
impossible for that container to be used or removed.
Evicting a container is done using the `rm --force` command.

Signed-off-by: Marco Vedovati <mvedovati@suse.com>
2019-09-25 19:44:38 +02:00
Qi Wang
0144c3796b fix cp none exists dest path ends with '/'
close #3894
This patch let podman cp return 'no such file or directory' error if DEST_PATH does not exist and ends with / when copying file.

Signed-off-by: Qi Wang <qiwan@redhat.com>
2019-09-25 12:48:05 -04:00
OpenShift Merge Robot
8ab3c86aa1
Merge pull request #4106 from vrothberg/fedora
Dockerfile.fedora: install packages to build catatonit
2019-09-25 17:52:52 +02:00
OpenShift Merge Robot
f197ebe851
Merge pull request #4036 from vrothberg/update-readme
Update readme
2019-09-25 16:11:30 +02:00
OpenShift Merge Robot
4f301c54b8
Merge pull request #4091 from dylanpinn/patch-1
Update mac_client link in podman tutorial
2019-09-25 15:40:54 +02:00
Valentin Rothberg
564edfacce Dockerfile.fedora: install packages to build catatonit
Needed to update the CI images for #4090.

Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2019-09-25 15:36:04 +02:00
Valentin Rothberg
fd8570befa README: add Communications section
Add a `Communications` section to the README to make it more
approachable for new users who want to reach the community and
maintainers.

Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2019-09-25 13:49:18 +02:00
Valentin Rothberg
d038e6a5ff drop OWNERS link for CONTRIBUTING.md
It was pointing to K8s docs and didn't really fit into the
communications context.

Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2019-09-25 13:49:18 +02:00
Valentin Rothberg
80f6af7766 catatonit: clone and build
Instead of unconditionally pulling the x86 binary, clone the repository
and build the binary to make it independent of the architecture.

Fixes: #2699
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2019-09-25 11:05:41 +02:00
Valentin Rothberg
6f4e3beedc bump catatonit to v0.1.4
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2019-09-25 10:16:01 +02:00
OpenShift Merge Robot
240095e24b
Merge pull request #4102 from baude/remotestdin
conditionally send stdin on remote run
2019-09-25 09:45:55 +02:00
OpenShift Merge Robot
a5b24816c7
Merge pull request #4073 from cevich/move_ci_unit_test
Cirrus: Fail early on CI script unit test
2019-09-25 09:45:47 +02:00
OpenShift Merge Robot
729175ad84
Merge pull request #4088 from baude/varlinkbuildoutput
Document the required varlink build args
2019-09-25 09:35:47 +02:00
OpenShift Merge Robot
e4835f6b01
Merge pull request #4086 from mheon/cni_del_on_refresh
Force a CNI Delete on refreshing containers
2019-09-25 09:35:40 +02:00
OpenShift Merge Robot
525be7d3db
Merge pull request #4103 from mheon/handle_volume_conflict
Handle conflict between volumes and --read-only-tmpfs
2019-09-25 09:16:44 +02:00
Matthew Heon
df433f6f16 Bump gitvalidation epoch
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 16:40:22 -04:00
Matthew Heon
8d5387eccd Bump to v1.6.0-dev
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 16:40:22 -04:00
Matthew Heon
9181c65b5d Bump to v1.6.0-rc2
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 16:39:59 -04:00
Matthew Heon
d89414b1f0 Handle conflict between volumes and --read-only-tmpfs
When a named volume is mounted on any of the tmpfs filesystems
created by read-only tmpfs, it caused a conflict that was not
resolved prior to this.

Fixes BZ1755119

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 15:57:17 -04:00
OpenShift Merge Robot
0000afc1af
Merge pull request #4098 from mheon/release_notes_1.6.0_rc2
Add release notes for new-in-RC2 changes
2019-09-24 21:34:29 +02:00
Chris Evich
601052b386
Cirrus: Upload windows MSI release file
Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-24 15:13:40 -04:00
baude
61a226fbd5 conditionally send stdin on remote run
when running a container remotely, we should only be sending stdin when
running with --interactive; otherwise use nil.

Fixes: #4095

Signed-off-by: baude <bbaude@redhat.com>
2019-09-24 13:43:44 -05:00
OpenShift Merge Robot
1dfac0e776
Merge pull request #4094 from haircommander/play-only-pod
play kube: Only support pod kind in k8s yaml
2019-09-24 20:41:43 +02:00
OpenShift Merge Robot
b300b981e7
Merge pull request #3756 from gabibeyer/rootlessOrdering
rootless: Rearrange setup of rootless containers
2019-09-24 18:47:18 +02:00
OpenShift Merge Robot
079dc576de
Merge pull request #4097 from edsantiago/bats
system tests: run test: reenable and fix
2019-09-24 18:32:59 +02:00
Chris Evich
85bfd70c91
Cirrus: VM Image accounting doc update
Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-24 11:27:42 -04:00
Matthew Heon
bb350b2bbf Add release notes for new-in-RC2 changes
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 11:20:16 -04:00
Ed Santiago
c146f8d7d2 system tests: run test: reenable and fix
Test had incorrectly been disabled for all podman; it
should've been disabled only for podman-remote. Fixed
that, and fixed the problem that was causing failures:
podman-remote is gobbling up stdin (#4095), so no
tests were actually being run at all, or only one.
Fixed by redirecting input on the run_podman invocation.
Added, as backup, a confirmation mechanism to ensure
that all expected tests are being run.

Note that test is reenabled, but the output check is
disabled for podman-remote due to #4096; this at least
lets us check exit status.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2019-09-24 08:46:40 -06:00
Peter Hunt
e3a84b9487 play kube: Only support pod kind in k8s yaml
Since we only really support playing pods, and no other kubernetes types

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2019-09-24 09:54:55 -04:00
Matthew Heon
b57d2f4cc7 Force a CNI Delete on refreshing containers
CNI expects that a DELETE be run before re-creating container
networks. If a reboot occurs quickly enough that containers can't
stop and clean up, that DELETE never happens, and Podman
currently wipes the old network info and thinks the state has
been entirely cleared. Unfortunately, that may not be the case on
the CNI side. Some things - like IP address reservations - may
not have been cleared.

To solve this, manually re-run CNI Delete on refresh. If the
container has already been deleted this seems harmless. If not,
it should clear lingering state.

Fixes: #3759

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 09:52:11 -04:00
OpenShift Merge Robot
83b2348313
Merge pull request #4089 from vrothberg/fix-4005
runtime: fix logic to disable SDNotify
2019-09-24 15:12:27 +02:00
baude
e9421479d1 Document the required varlink build args
The API document incorrectly documented the wrong varlink build
arguments.  The output attribute is required.

Fixes: #3204

Signed-off-by: baude <bbaude@redhat.com>
2019-09-24 08:05:31 -05:00
Dylan Pinn
0296e50465 Update mac_client link
I fixed the mac_client tutorial link as it was returning a 404 error.

Signed-off-by: Dylan Pinn <me@dylanpinn.com>
2019-09-24 22:19:21 +10:00
Valentin Rothberg
3b90f1c765 runtime: fix logic to disable SDNotify
Fix the logic when getting the runtime for varlink to actually disable
SDNotify support.

Fixes: #4005
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2019-09-24 12:11:59 +02:00
gabi beyer
65d5a9823e add list mount tests
Add two unit tests to determine whether mounts are being listed
correctly. One tests that a created container is not listed
until mounted. The second checks that running containers are
mounted, and then no longer listed as mounted when they stop
running. The final test creates three containers, mounts two,
and checks that mount correctly only lists the two mounted.

Signed-off-by: gabi beyer <gabrielle.n.beyer@intel.com>
2019-09-24 11:01:28 +02:00
gabi beyer
0115be19f5 Make netns bind mount shared
To 'avoid unknown FS magic on "/run/user/1000/netns/...": 1021994'
make the network namespace bind-mount recursively shared, so the
mount is back-propogated to the host.

Signed-off-by: gabi beyer <gabrielle.n.beyer@intel.com>
2019-09-24 11:01:28 +02:00
gabi beyer
f50ba201c4 Add Kata Containers support
Update documentation to show Kata Containers support is no longer
a limitation with merging of commit 486a5b9

Signed-off-by: gabi beyer <gabrielle.n.beyer@intel.com>
2019-09-24 11:01:28 +02:00