7573 commits

Author	SHA1	Message	Date
Danish Prakash	9dc5707a3d	Merge pull request #29638 from CodeWithAK28/bindings-no-serialize-auth-fields ... pkg/bindings: keep auth fields out of the query string	2026-08-26 12:49:50 +05:30
Matt Heon	de350af4b1	Merge pull request #28447 from jude-ruben/fix/machine-image-permissions ... machine: ensure disk image is writable before resize (fix read-only image init failure)	2026-08-24 15:07:36 -04:00
Anisha Khairnar	b142e2e823	pkg/bindings: keep auth fields out of the query string ... Signed-off-by: Anisha Khairnar <anishakhairnar284@gmail.com>	2026-08-24 23:43:27 +05:30
Jude Ruben Fernando	73657e9267	Fix machine init failure with read-only disk image ... Fixes: #2756 Signed-off-by: Jude Ruben Fernando <rubenfdo@gmail.com> machine: fix stdpull internal imports Signed-off-by: Jude Ruben Fernando <rubenfdo@gmail.com>	2026-08-24 14:35:33 +00:00
Matt Heon	ee442ecc47	Merge pull request #29623 from ROKUMATE/test-machine-splitvolume ... pkg/machine/vmconfigs: add tests for SplitVolume	2026-08-24 09:54:26 -04:00
Miloslav Trmač	ca42cbff0a	Merge pull request #29628 from mehrdadbn9/fix/29627-stats-nil-pointer ... fix(api): nil check Memory.Limit before dereference in stats handler	2026-08-24 15:43:09 +02:00
ROKUMATE	724325b709	pkg/machine/vmconfigs: add tests for SplitVolume ... Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-24 15:15:20 +05:30
Jan Rodák	e14fafc21e	Merge pull request #29592 from CodeWithAK28/docs-dedup-generate-kube ... pkg/api/server: drop duplicate generate/kube swagger operation	2026-08-24 09:21:59 +02:00
Mehrdad Biukian Naeini	14506421f9	fix(api): nil check Memory.Limit before dereference in stats handler ... When a container has --memory-reservation set without --memory-limit, resources.Memory is non-nil but resources.Memory.Limit is nil. The compat stats handler dereferences the nil Limit pointer, causing a panic that returns a 500 to the client. Fix: add resources.Memory.Limit != nil guard before the dereference. Regression test added in test/apiv2/19-stats.at. Fixes #29627 Signed-off-by: Mehrdad Biukian Naeini <mehrdadbiukian@gmail.com>	2026-08-23 18:20:37 +04:00
Matt Heon	f19c577355	Merge pull request #29505 from nXtCyberNet/issue/proxy ... made the error message more understandable	2026-08-20 15:50:09 -04:00
Matt Heon	cf156a8ee3	Merge pull request #29468 from JamesBalazs/healthcheck-fix ... support healthcheck: {} inherits healthcheck from image	2026-08-20 15:42:15 -04:00
Matt Heon	f00ce00663	Merge pull request #29565 from magic-peach/fix-29555-kube-memory-emptydir-shared ... kube: share memory backed emptyDir between containers in a pod	2026-08-20 15:28:15 -04:00
Danish Prakash	9eb84c0977	Merge pull request #29588 from ROKUMATE/fix-bindings-generator-trimsuffix ... pkg/bindings/generator: use TrimSuffix to strip the .go extension	2026-08-21 00:00:34 +05:30
Matt Heon	a106ec60ec	Merge pull request #29593 from ROKUMATE/test-pkg-util-restartpolicy ... pkg/util: add tests for ParseRestartPolicy	2026-08-20 14:08:40 -04:00
Paul Holzinger	e9b8854cf4	Merge pull request #29563 from vishnukothakapu/perf-walkdir ... Performance: Upgrade filepath.Walk to filepath.WalkDir	2026-08-20 19:04:21 +02:00
ROKUMATE	a37ca160aa	pkg/util: add tests for ParseRestartPolicy ... ParseRestartPolicy parses the value of the --restart flag and had no unit test. It handles several distinct cases: bare policy names, the "never" -> "no" normalization (case-insensitive), on-failure with a retry count, and a number of error paths (retries specified on a non-on-failure policy, non-numeric or negative retry counts, and too many colon-separated fields). Add a table-driven unit test covering the happy paths and each error branch. Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-20 20:54:42 +05:30
Vishnu Kothakapu	7a71964303	Performance: Upgrade filepath.Walk to filepath.WalkDir ... filepath.Walk makes an expensive os.Stat system call on every file. filepath.WalkDir uses os.ReadDir under the hood to bypass this overhead, making directory scanning much faster. Fixes: #29562 Signed-off-by: Vishnu Kothakapu <vishnukothakapu27@gmail.com>	2026-08-20 20:48:08 +05:30
Anisha Khairnar	c1e2ece120	pkg/api/server: drop duplicate generate/kube swagger operation ... Signed-off-by: Anisha Khairnar <anishakhairnar284@gmail.com>	2026-08-19 23:39:01 +05:30
Paul Holzinger	768072c6a8	Merge pull request #29572 from dexp007/main ... compat/secrets: do not expose secret data on inspect endpoint	2026-08-19 15:55:51 +02:00
ROKUMATE	c619e90e1c	pkg/bindings/generator: use TrimSuffix to strip the .go extension ... Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-19 18:28:33 +05:30
Davoud Azari	b57e7075e2	compat/secrets: do not expose secret data on inspect endpoint ... The Docker-compat secret inspect endpoint was incorrectly honoring the showsecret query parameter, which could expose plaintext secret data to clients using the Docker-compatible API. This restricts showsecret to libpod-only requests. Docker-compat clients always receive redacted secret data, matching Docker's own behavior. Add APIv2 tests covering the showsecret behavior on both the Docker-compat and libpod endpoints, confirming secret data is never returned from the compat endpoint while libpod continues to honor the flag. Fixes: #29570 Signed-off-by: Davoud Azari <davidmotral@gmail.com>	2026-08-19 14:30:37 +03:30
Matt Heon	f63cf24b00	Merge pull request #29460 from RudraDudhat2509/fix/hyperv-vsock-ready-timeout ... hyperv: add timeout to vsock ready wait	2026-08-19 05:11:28 -04:00
Jan Rodák	c21fb45ac8	Merge pull request #29378 from danishprakash/fix-farm-build-tag ... farm: handle tagged --tag references on build	2026-08-19 09:55:37 +02:00
Danish Prakash	5745ac69e0	farm: handle tagged --tag references on build ... podman farm build pushes each per-arch image to the registry by appending `UnknownDigestSuffix` to the image specified using --tag. This fails because a tag is not expected when UnknownDigestSuffix is used. Parse the image reference and pass only the untagged image reference when podman does this suffixed push to the registry. Fixes #25039 Co-authored-by: Kevin Crocombe <kevin.crocombe@pegortech.co.uk> Signed-off-by: Danish Prakash <contact@danishpraka.sh>	2026-08-19 12:44:54 +05:30
nXtCyberNet	87ee2227b6	made the error message more understandable ... Signed-off-by: nXtCyberNet <rohantech2005@gmail.com>	2026-08-19 12:06:57 +05:30
Matt Heon	732e7c9d26	Merge pull request #29574 from CodeWithAK28/docs-manifest-api-params ... pkg/api/server: document missing manifest push and create params	2026-08-18 15:21:05 -04:00
Paul Holzinger	4d055045e5	Merge pull request #29489 from ashley-cui/tmpfs ... Compat v1.46: support HostConfig.Mounts.TmpfsOptions for containers/create	2026-08-18 15:37:15 +02:00
Anisha Khairnar	baddf266c1	pkg/api/server: document missing manifest push and create params ... The manifest push and create endpoints accept query parameters that were never documented, so API users can't discover them. Push was missing compressionFormat, compressionLevel, format and removeSignatures. Create was missing annotation and annotations. The wording matches the same parameters on the image push endpoint. The deprecated v3 push and add endpoints are left alone. Signed-off-by: Anisha Khairnar <anishakhairnar284@gmail.com>	2026-08-18 12:39:30 +05:30
Danish Prakash	598920feef	Merge pull request #29322 from ROKUMATE/test-pkg-machine-env ... pkg/machine/env: add tests for WithPodmanPrefix and dir prefixes	2026-08-18 10:08:39 +05:30
Jan Rodák	4b6873a5ef	Merge pull request #29527 from vishnukothakapu/perf-strings-equalfold ... Performance: Replace strings.ToLower with strings.EqualFold	2026-08-17 21:59:25 +02:00
Akanksha Trehun	70d9884ae9	kube: share memory backed emptyDir between containers in a pod ... An emptyDir with "medium: Memory" was translated into a per-container tmpfs mount, so every container in the pod received its own empty filesystem. Data written by an init container was therefore invisible to the regular containers, while Kubernetes specifies that an emptyDir is shared by all containers in the pod and outlives the init container. Create an anonymous named volume backed by tmpfs instead. Every container in the pod refers to the same volume name, so the mount is shared, and the volume is still removed together with the pod. The emptyDir sizeLimit is passed through as the tmpfs size option, which was previously ignored. Fixes: #29555 Signed-off-by: Akanksha Trehun <akankshatrehun@gmail.com>	2026-08-17 17:58:17 +05:30
Paul Holzinger	5b366f4b34	Merge pull request #29511 from vishnukothakapu/perf-regexp-mustcompile ... Performance: Hoist regexp.MustCompile out of functions	2026-08-17 12:53:04 +02:00
Ashley Cui	8e63c695f2	Compat v1.46: Support HostConfig.Mounts.TmpfsOptions for containers/create ... POST /containers/create now takes Options as part of HostConfig.Mounts.TmpfsOptions to set options for tmpfs mounts. Signed-off-by: Ashley Cui <acui@redhat.com>	2026-08-14 21:14:49 -04:00
Matt Heon	a2409076ef	Merge pull request #29523 from ROKUMATE/docs-swagger-kube-play-params ... pkg/api/server: document noHostname and noPodPrefix kube play params	2026-08-14 18:36:10 -04:00
Vishnu Kothakapu	0a2350324a	Performance: Replace strings.ToLower with strings.EqualFold ... Replaces unnecessary heap allocations for case-insensitive equality checks with standard library strings.EqualFold. Fixes: #29526 Signed-off-by: Vishnu Kothakapu <vishnukothakapu27@gmail.com>	2026-08-15 02:17:47 +05:30
Vishnu Kothakapu	e3797d95b1	Performance: Use delayed regex compilation ... Replaces regexp.MustCompile with regexp.Delayed from go.podman.io/storage/pkg/regexp for global regular expressions. This avoids compiling regular expressions during the global init scope, improving startup performance for all commands. Tests are kept using regexp.MustCompile where applicable. Fixes: #29510 Signed-off-by: Vishnu Kothakapu <vishnukothakapu27@gmail.com>	2026-08-14 21:14:17 +05:30
Jan Rodák	b4aadcdd1a	Merge pull request #29502 from vishnukothakapu/refactor-err-error ... Refactor: Remove redundant err.Error() in pkg/machine	2026-08-14 16:06:58 +02:00
Jan Rodák	cb7553bade	Merge pull request #29494 from nXtCyberNet/issue/ci ... added errorlint	2026-08-14 15:02:05 +02:00
ROKUMATE	4a7be9e307	pkg/machine/env: add tests for WithPodmanPrefix ... Fixes: #29314 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-14 17:28:31 +05:30
ROKUMATE	0928ec5376	pkg/api/server: document noHostname and noPodPrefix kube play params ... Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-14 15:56:02 +05:30
Matt Heon	05b3b7220b	Merge pull request #29159 from jiwahn/fix-kube-seccomp-profile ... kube: use native seccompProfile fields	2026-08-13 21:55:50 -04:00
James Balazs	16a1d3fbe9	support healthcheck: {} inherits healthcheck from image ... Fixes: #29467 Signed-off-by: James Balazs <j.c.balazs1@gmail.com>	2026-08-14 01:27:39 +00:00
nXtCyberNet	f76d9de01a	added errorlint ... Fixes: #29488 Signed-off-by: nXtCyberNet <rohantech2005@gmail.com>	2026-08-14 01:35:03 +05:30
Brent Baude	3c2f492e87	Merge pull request #29509 from ROKUMATE/fix-trust-parseuids-panic ... pkg/trust: prevent panic on malformed GPG uid/pub lines	2026-08-13 14:48:52 -05:00
Vishnu Kothakapu	d5f84c7167	Refactor: Remove redundant err.Error() in pkg/machine ... When passing an error to fmt.Errorf or logrus with formatting verbs like %v or %w, it is not necessary to explicitly call err.Error(). The format functions will automatically call the Error() method because the value implements the error interface. Removing these explicit calls makes the code cleaner and more idiomatic. Fixes: #29501 Signed-off-by: Vishnu Kothakapu <vishnukothakapu27@gmail.com>	2026-08-14 01:09:08 +05:30
ROKUMATE	d212fc842d	pkg/trust: prevent panic on malformed GPG uid/pub lines ... Fixes: #29508 Signed-off-by: ROKUMATE <rohitkumawat0110@gmail.com>	2026-08-13 23:51:56 +05:30
Jiwoo Ahn	bf8df1f057	kube: use native seccompProfile fields ... Fixes: #27501 Signed-off-by: Jiwoo Ahn <ikwydls1314@gmail.com>	2026-08-13 16:54:23 +09:00
Ashley Cui	d2ae516a39	api: Fix tmpfs mode when setting size ... Fixed a bug where setting tmpfs size automatically set mode to 0000 Signed-off-by: Ashley Cui <acui@redhat.com>	2026-08-12 19:27:14 -04:00
Vishnu Kothakapu	82c44cdcaa	Refactor: Replace static fmt.Errorf with errors.New in pkg/systemd ... Signed-off-by: Vishnu Kothakapu <vishnukothakapu27@gmail.com>	2026-08-12 22:21:04 +05:30
Matt Heon	cbd17f7459	Merge pull request #29473 from ROKUMATE/swagger-checkpoint-createimage ... pkg/api: document the createImage checkpoint query parameter	2026-08-12 10:26:11 -04:00