Matt Heon 2c0f404826 Do not include image annotations when building spec ... These annotations can have security implications - crun, for example, allows rootless containers to preserve the user's groups through an annotation. We absolutely should not include annotations from an untrusted image off the internet by default. We may consider whitelisting some annotations (e.g. the legacy WASM annotations), but given that there is now a more explicit way of specifying an image uses the WASM runtime in the OCI image spec, I'm just tearing this out entirely for now. Signed-off-by: Matt Heon <mheon@redhat.com>		2023-05-11 23:48:23 -04:00
..
annotations	Remove ReservedAnnotations from kube generate specification	2023-01-18 08:46:24 -05:00
api	compat container create: match duplicate mounts correctly	2023-05-04 11:57:02 +02:00
auth	[CI:DOCS] Fix spelling and typos	2022-11-19 16:26:00 +01:00
autoupdate	auto-update: return errors when checking for updates	2023-04-25 12:15:22 +02:00
bindings	Merge pull request #18441 from Luap99/remote-connect-err	2023-05-03 18:27:34 -04:00
channel	bump golangci-lint to v1.50.1	2022-12-15 13:39:56 +01:00
checkpoint	Update checkpointctl v0.1.0	2023-03-07 18:28:39 +00:00
copy	pkg: switch to golang native error wrapping	2022-07-08 08:54:47 +02:00
criu	deps: bump go-criu to v6	2022-11-01 13:57:24 +05:30
ctime	Replace deprecated ioutil	2022-09-20 15:34:27 -04:00
domain	Kube Play - Support multi-doc YAML files for configmap argument	2023-05-11 13:13:08 +03:00
env	vendor: bump containers/(storage, common, buildah, image)	2023-04-10 17:30:14 +05:30
errorhandling	Fix typos	2023-02-11 18:23:24 +01:00
inspect	pkg/inspect: remove unused ImageResult type	2022-05-24 16:07:39 +02:00
k8s.io	*: migrate image registry to registry.k8s.io	2023-04-11 10:30:43 -04:00
lookup	bump golangci-lint to v1.50.1	2022-12-15 13:39:56 +01:00
machine	Merge pull request #18402 from baude/applehvpass1	2023-05-03 10:17:51 -04:00
namespaces	libpod: Add pasta networking mode	2022-11-08 00:16:35 +01:00
parallel	Fix stutters	2022-09-10 07:52:00 -04:00
ps	Add {{.Restarts}} to podman ps	2023-05-02 10:30:07 -04:00
rctl	pkg/rctl: Remove unused cgo dependency	2022-10-31 15:13:48 +00:00
rootless	pkg/rootless: use catatonit from /usr/libexec/podman	2023-04-11 11:00:07 +02:00
rootlessport	go fmt: use go 1.18 conditional-build syntax	2022-03-18 09:11:53 +01:00
seccomp	pkg: switch to golang native error wrapping	2022-07-08 08:54:47 +02:00
selinux	Fix SELinux functions names to not be repetitive	2020-04-23 15:57:34 -04:00
servicereaper	go fmt: use go 1.18 conditional-build syntax	2022-03-18 09:11:53 +01:00
signal	Run codespell on code	2022-11-04 10:57:41 -04:00
specgen	Do not include image annotations when building spec	2023-05-11 23:48:23 -04:00
specgenutil	Add --restart flag to pod create	2023-05-02 10:29:58 -04:00
systemd	quadlet: support HostName	2023-05-09 13:35:54 +02:00
terminal	podman ssh work, using new c/common interface	2022-08-09 14:00:58 -04:00
timetype	bump golangci-lint to v1.49.0	2022-10-17 09:19:41 +02:00
trust	chore: replace github.com/ghodss/yaml with sigs.k8s.io/yaml	2023-04-06 21:11:17 +08:00
util	libpod/Container.rootFsSize(): use recorded image sizes	2023-05-09 09:33:37 -04:00