Matt Heon 0f18a0144a Do not include image annotations when building spec ... These annotations can have security implications - crun, for example, allows rootless containers to preserve the user's groups through an annotation. We absolutely should not include annotations from an untrusted image off the internet by default. We may consider whitelisting some annotations (e.g. the legacy WASM annotations), but given that there is now a more explicit way of specifying an image uses the WASM runtime in the OCI image spec, I'm just tearing this out entirely for now. Signed-off-by: Matt Heon <mheon@redhat.com>		2023-05-22 17:41:19 +00:00
..
annotations	Remove ReservedAnnotations from kube generate specification	2023-01-18 08:46:24 -05:00
api	api: fix parsing filters	2023-05-03 06:58:47 +00:00
auth	[CI:DOCS] Fix spelling and typos	2022-11-19 16:26:00 +01:00
autoupdate	auto-update: stop+start instead of restart sytemd units	2023-03-29 11:31:35 +02:00
bindings	Merge pull request #17950 from umohnani8/deployments	2023-04-03 11:08:29 -04:00
channel	bump golangci-lint to v1.50.1	2022-12-15 13:39:56 +01:00
checkpoint	Update checkpointctl v0.1.0	2023-03-07 18:28:39 +00:00
copy	pkg: switch to golang native error wrapping	2022-07-08 08:54:47 +02:00
criu	deps: bump go-criu to v6	2022-11-01 13:57:24 +05:30
ctime	Replace deprecated ioutil	2022-09-20 15:34:27 -04:00
domain	Merge pull request #18002 from Luap99/netavark-plugin	2023-04-11 13:37:43 -04:00
env	vendor: bump containers/(storage, common, buildah, image)	2023-04-10 17:30:14 +05:30
errorhandling	Fix typos	2023-02-11 18:23:24 +01:00
inspect	pkg/inspect: remove unused ImageResult type	2022-05-24 16:07:39 +02:00
k8s.io	*: migrate image registry to registry.k8s.io	2023-04-18 14:07:08 +00:00
lookup	bump golangci-lint to v1.50.1	2022-12-15 13:39:56 +01:00
machine	Use atomic config writing strategy for podman machine config files	2023-04-10 14:57:49 -05:00
namespaces	libpod: Add pasta networking mode	2022-11-08 00:16:35 +01:00
parallel	Fix stutters	2022-09-10 07:52:00 -04:00
ps	Add initial SQLite-backed state implementation	2023-02-22 11:00:50 -05:00
rctl	pkg/rctl: Remove unused cgo dependency	2022-10-31 15:13:48 +00:00
rootless	pkg/rootless: use catatonit from /usr/libexec/podman	2023-04-11 11:00:07 +02:00
rootlessport	go fmt: use go 1.18 conditional-build syntax	2022-03-18 09:11:53 +01:00
seccomp	pkg: switch to golang native error wrapping	2022-07-08 08:54:47 +02:00
selinux	Fix SELinux functions names to not be repetitive	2020-04-23 15:57:34 -04:00
servicereaper	go fmt: use go 1.18 conditional-build syntax	2022-03-18 09:11:53 +01:00
signal	Run codespell on code	2022-11-04 10:57:41 -04:00
specgen	Do not include image annotations when building spec	2023-05-22 17:41:19 +00:00
specgenutil	The --ulimit option accepts the name with an RLIMIT_ prefix both upper and lower case	2023-04-06 18:20:28 +04:00
systemd	Support systemd optional prefix '-' for devices.	2023-04-27 14:49:06 +00:00
terminal	podman ssh work, using new c/common interface	2022-08-09 14:00:58 -04:00
timetype	bump golangci-lint to v1.49.0	2022-10-17 09:19:41 +02:00
trust	chore: replace github.com/ghodss/yaml with sigs.k8s.io/yaml	2023-04-06 21:11:17 +08:00
util	rootless: make sure we only use a single pause process	2023-04-11 10:57:46 +02:00