spiegel_podman/pkg
Matt Heon 3721ff82ff Revert "Enable 'podman run' for checkpoint images"
This reverts commit f4401567cd.

This commit has been identified as a serious security issue.
Running checkpoints via `podman run` introduces potentially
confusing behavior where all security for a container, even
options specified by the user at the command line, can be turned
off by the checkpoint. Checkpoints have special security
considerations and must be explicitly requested by the user to
ensure they are used safely. We recommend ensuring the lifecycle
of a checkpoint is fully monitored and integrity is ensured at
each stage to guarantee safety.

Signed-off-by: Matt Heon <matthew.heon@pm.me>
2026-09-28 07:48:00 -04:00
..
annotations run golangci-lint --fix 2026-09-04 16:30:10 +02:00
api Merge pull request #29726 from r-vdp/compat-inline-seccomp 2026-09-24 09:01:54 -04:00
auth api/compat: switch to moby/moby 2026-03-09 11:09:23 +01:00
autoupdate auto-update: Add container filters 2026-09-17 11:16:58 -04:00
bindings Merge pull request #29802 from Daksha1611/fix-bindings-unit-tests 2026-09-21 15:29:15 -04:00
channel pkg/channel: add tests for the channel WriteCloser 2026-07-25 17:11:50 +05:30
checkpoint silence new platform specific staticcheck issues 2026-09-04 17:21:15 +02:00
copy pkg/copy: add tests for ParseSourceAndDestination 2026-06-24 22:25:26 +05:30
criu run go fix ./... 2026-09-04 11:53:04 +02:00
ctime update golangci/golangci-lint to v1.63.4 2025-01-07 15:48:53 +01:00
domain Revert "Enable 'podman run' for checkpoint images" 2026-09-28 07:48:00 -04:00
emulation fix some missing scanner error checks 2026-06-30 10:32:32 +02:00
env run modernize -fix ./... 2025-09-10 16:17:04 +02:00
errorhandling pkg/errorhandling: remove deadcode 2025-06-26 19:37:14 +02:00
farm farm: handle tagged --tag references on build 2026-08-19 12:44:54 +05:30
fileserver RUN-4539: Change podman module paths 2026-04-22 14:02:25 -05:00
inspect swagger: fix deprecated alias annotations and model name collisions 2026-08-10 22:14:47 +05:30
k8s.io added errorlint 2026-08-14 01:35:03 +05:30
logiface run modernize -fix ./... 2025-09-10 16:17:04 +02:00
lookup Replace os.Is* error checks with errors.Is 2026-05-21 13:09:42 -07:00
machine prevent goroutine leak in StartGenericAppleVM 2026-09-20 15:15:25 +05:00
namespaces pkg/namespaces: add tests for UsernsMode and NetworkMode 2026-06-30 16:50:07 +05:30
parallel RUN-4539: Change podman module paths 2026-04-22 14:02:25 -05:00
pidhandle exec: forward signals to exec sessions over local and remote 2026-09-11 21:32:26 +05:30
ps Performance: Use delayed regex compilation 2026-08-14 21:14:17 +05:30
rctl added errorlint 2026-08-14 01:35:03 +05:30
rootless Merge pull request #29657 from sundeep8967/fix/pause-process-environ 2026-09-28 12:54:47 +02:00
seccomp pkg: switch to golang native error wrapping 2022-07-08 08:54:47 +02:00
selinux bump selinux to v1.15.1, use SetProcessKind 2026-06-02 11:18:34 -07:00
signal enable gofumpt formatter 2025-11-11 12:32:46 +01:00
specgen Merge pull request #29726 from r-vdp/compat-inline-seccomp 2026-09-24 09:01:54 -04:00
specgenutil Merge pull request #29726 from r-vdp/compat-inline-seccomp 2026-09-24 09:01:54 -04:00
specgenutilexternal pkg/specgenutilexternal: add tests for FindMountType 2026-07-08 17:46:55 +05:30
syncmap Add syncmap package and use it for graph stop/remove 2025-02-17 14:32:34 -05:00
systemd Merge pull request #29375 from Mahajan-Sachin/quadlet-volume-remainafterexit 2026-09-14 08:52:48 -04:00
terminal Fix Lint on Windows and enable the job 2024-02-20 08:06:18 -05:00
trust pkg/trust: prevent panic on malformed GPG uid/pub lines 2026-08-13 23:51:56 +05:30
util pkg/util: delegate sysctl validation to c/common 2026-09-18 07:31:07 -05:00