erabo/spiegel_podman
1
0
Fork 0
mirror of https://github.com/podman-container-tools/podman.git synced 2026-08-07 01:15:44 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
spiegel_podman/test/e2e
History
Matt Heon 0f18a0144a Do not include image annotations when building spec 
These annotations can have security implications - crun, for
example, allows rootless containers to preserve the user's groups
through an annotation. We absolutely should not include
annotations from an untrusted image off the internet by default.

We may consider whitelisting some annotations (e.g. the legacy
WASM annotations), but given that there is now a more explicit
way of specifying an image uses the WASM runtime in the OCI image
spec, I'm just tearing this out entirely for now.

Signed-off-by: Matt Heon <mheon@redhat.com>
2023-05-22 17:41:19 +00:00
..
build Do not include image annotations when building spec 2023-05-22 17:41:19 +00:00
cdi build(deps): bump github.com/container-orchestrated-devices/container-device-interface 2023-02-20 14:51:04 +01:00
config Read kube_generate_type from containers.conf 2023-04-11 09:15:05 -04:00
quadlet Support systemd optional prefix '-' for devices. 2023-04-27 14:49:06 +00:00
sign e2e: reduce dependency on /tmp for e2e tests 2023-01-26 22:20:15 +09:00
testdata Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) 2023-01-27 16:47:32 +01:00
attach_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
benchmarks_test.go e2e tests: stop using UBI images 2023-01-06 08:21:50 -07:00
build_test.go test/e2e: use custom network config dir where needed 2023-04-06 16:16:50 +02:00
checkpoint_image_test.go test: podman run with checkpoint image 2022-12-02 14:39:33 +00:00
checkpoint_test.go e2e: reduce dependency on /tmp for e2e tests 2023-01-26 22:20:15 +09:00
cleanup_test.go Output messages display rawInput 2022-08-02 18:28:37 +09:00
commit_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
common_test.go test/e2e: use custom network config dir where needed 2023-04-06 16:16:50 +02:00
config.go *: migrate image registry to registry.k8s.io 2023-04-18 14:07:08 +00:00
config_amd64.go e2e tests: stop using UBI images 2023-01-06 08:21:50 -07:00
config_arm64.go e2e tests: stop using UBI images 2023-01-06 08:21:50 -07:00
config_ppc64le.go e2e tests: cleanup: capitalize CONSTANTS 2022-07-05 15:36:08 -06:00
container_clone_test.go podman container clone env patch 2022-09-16 11:43:26 -04:00
container_create_volume_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
container_inspect_test.go e2e tests: cleanup: capitalize CONSTANTS 2022-07-05 15:36:08 -06:00
containers_conf_test.go Add support for cgroup_config from containers.conf 2023-04-01 11:12:13 -04:00
cp_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
create_staticip_test.go e2e: use isRootless() instead of rootless.IsRootless() 2023-01-18 10:34:51 +09:00
create_staticmac_test.go e2e: use isRootless() instead of rootless.IsRootless() 2023-01-18 10:34:51 +09:00
create_test.go Ensure that SQLite state handles name-ID collisions 2023-03-24 15:09:25 -04:00
diff_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
events_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
exec_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
exists_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
export_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
generate_kube_test.go Merge pull request #18066 from Juneezee/chore/yaml 2023-04-06 16:34:17 -04:00
generate_spec_test.go Warning messages are printed and ignored if we use an unsupported option 2022-08-23 11:54:31 +09:00
generate_systemd_test.go test: retrofit error message 2023-04-10 17:30:54 +05:30
healthcheck_run_test.go e2e: healthcheck on stopped container: fix flake 2023-04-04 09:42:05 -06:00
history_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
image_scp_test.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
image_sign_test.go test/e2e: gpg keep stdout/err attached 2023-03-29 16:33:28 +02:00
images_test.go "podman pull by digest and list --all" test: untag instead of rmi 2023-04-06 16:48:52 -04:00
import_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
info_test.go CI: test and confirm DESIRED_DATABASE 2023-03-16 15:32:56 -06:00
init_test.go Output messages display rawInput 2022-08-02 18:28:37 +09:00
inspect_test.go Add container error message to ContainerState 2023-01-03 13:21:24 -05:00
kill_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
libpod_suite_remote_test.go Update Cirrus display names, and fix get-ci-vm script 2023-03-15 14:45:28 -04:00
libpod_suite_test.go e2e: use isRootless() instead of rootless.IsRootless() 2023-01-18 10:34:51 +09:00
load_test.go enable gocritic linter 2022-04-26 18:12:22 +02:00
login_logout_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
logs_test.go e2e tests: fix racy flakes 2023-04-05 13:51:59 -06:00
manifest_test.go *: migrate image registry to registry.k8s.io 2023-04-18 14:07:08 +00:00
mount_rootless_test.go e2e: reduce dependency on /tmp for e2e tests 2023-01-26 22:20:15 +09:00
mount_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
negative_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
network_connect_disconnect_test.go all: stop using deprecated GenerateNonCryptoID 2022-09-13 16:26:26 -07:00
network_create_test.go network create: add --interface-name 2023-04-11 17:04:33 +02:00
network_test.go test/e2e: deduplicated network test 2023-04-11 17:04:42 +02:00
pause_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
play_build_test.go Vendor in latest containers/common with default capabilities 2022-12-15 14:28:30 -05:00
play_kube_test.go *: migrate image registry to registry.k8s.io 2023-04-18 14:07:08 +00:00
pod_clone_test.go [minor] fix duplicate test name 2022-07-07 11:23:17 -06:00
pod_create_test.go Ensure that SQLite state handles name-ID collisions 2023-03-24 15:09:25 -04:00
pod_infra_container_test.go Vendor in latest containers/common with default capabilities 2022-12-15 14:28:30 -05:00
pod_initcontainers_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
pod_inspect_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
pod_kill_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
pod_pause_test.go Fix podman pod unpaue TODO 2022-07-05 10:32:49 -04:00
pod_pod_namespaces_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
pod_prune_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
pod_ps_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
pod_restart_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
pod_rm_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
pod_start_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
pod_stats_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
pod_stop_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
pod_top_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
port_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
prune_test.go test/e2e: use custom network config dir where needed 2023-04-06 16:16:50 +02:00
ps_test.go fix: don't output "ago" when container is currently up and running 2023-01-27 12:32:15 +01:00
pull_test.go e2e: use isRootless() instead of rootless.IsRootless() 2023-01-18 10:34:51 +09:00
push_test.go Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) 2023-01-27 16:47:32 +01:00
quadlet_test.go Quadlet - do not set log-driver by default 2023-04-14 08:58:56 +00:00
rename_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
restart_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
rm_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
rmi_test.go e2e tests: stop using UBI images 2023-01-06 08:21:50 -07:00
run_aardvark_test.go e2e tests: cleanup: capitalize CONSTANTS 2022-07-05 15:36:08 -06:00
run_apparmor_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
run_cgroup_parent_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
run_cleanup_test.go e2e: Add rootless mount cleanup test 2022-08-05 12:01:51 +09:00
run_cpu_test.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
run_device_test.go ginkgo tests: apply ginkgolinter fixes 2022-12-20 16:47:17 +01:00
run_dns_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
run_entrypoint_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
run_env_test.go remote: allow --http-proxy for remote clients 2022-12-08 17:08:37 +01:00
run_exit_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
run_memory_test.go e2e: Add run --memory-swap test 2022-08-24 18:15:21 +09:00
run_networking_test.go test/e2e: remove unnecessary SkipIfNetavark() calls 2023-04-11 17:04:43 +02:00
run_ns_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
run_passwd_test.go create: add support for --group-entry 2023-02-15 11:20:18 +05:30
run_privileged_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
run_restart_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
run_seccomp_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
run_security_labels_test.go Vendor in latest containers/common with default capabilities 2022-12-15 14:28:30 -05:00
run_selinux_test.go e2e tests: stop using UBI images 2023-01-06 08:21:50 -07:00
run_signal_test.go e2e: use isRootless() instead of rootless.IsRootless() 2023-01-18 10:34:51 +09:00
run_staticip_test.go e2e: fix run_staticip_test about no_proxy 2023-01-31 16:55:11 +09:00
run_test.go Do not include image annotations when building spec 2023-05-22 17:41:19 +00:00
run_transient_test.go Ensure SQLite places uses the runroot in transient mode 2023-03-15 14:45:28 -04:00
run_userns_test.go test: reenable idmap test 2023-03-11 12:15:38 +01:00
run_volume_test.go e2e: use isRootless() instead of rootless.IsRootless() 2023-01-18 10:34:51 +09:00
run_working_dir_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
runlabel_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
save_test.go test/e2e: gpg keep stdout/err attached 2023-03-29 16:33:28 +02:00
search_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
secret_test.go Add support for secret exists 2023-04-03 15:33:50 +03:00
start_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
stats_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
stop_test.go ginkgo tests: apply ginkgolinter fixes 2022-11-25 14:41:43 +01:00
system_connection_test.go fix port issues for CONTAINER_HOST 2022-11-16 11:01:30 -05:00
system_df_test.go fix --format {{json .}} output to match docker 2022-11-09 17:59:05 +01:00
system_dial_stdio_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
system_reset_test.go test/e2e: use custom network config dir where needed 2023-04-06 16:16:50 +02:00
system_service_test.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
systemd_activate_test.go Run make codespell 2023-03-21 16:00:54 -04:00
systemd_test.go e2e tests: stop using UBI images 2023-01-06 08:21:50 -07:00
tag_test.go bump go module to version 4 2022-01-18 12:47:07 +01:00
toolbox_test.go Clean up more language for inclusiveness 2023-01-27 09:40:27 -05:00
top_test.go vendor containers/psgo@v1.8.0 2022-10-14 17:28:15 +02:00
tree_test.go e2e tests: cleanup: capitalize CONSTANTS 2022-07-05 15:36:08 -06:00
trust_test.go Replace deprecated ioutil 2022-09-20 15:34:27 -04:00
unshare_test.go e2e: fix some tests on remote 2023-02-08 18:07:41 +09:00
untag_test.go e2e tests: cleanup: capitalize CONSTANTS 2022-07-05 15:36:08 -06:00
update_test.go Fix default handling of pids-limit 2023-01-27 23:19:44 -06:00
version_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
volume_create_test.go Fix typos. Improve language. 2023-02-09 21:56:27 +01:00
volume_exists_test.go all: stop using deprecated GenerateNonCryptoID 2022-09-13 16:26:26 -07:00
volume_inspect_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
volume_ls_test.go podman volume ls: use report.Formatter over Template 2022-09-13 10:33:13 +02:00
volume_plugin_test.go fix volume-plugin-test flake 2023-03-30 09:15:13 +02:00
volume_prune_test.go fix != filter in volume prune 2023-02-15 10:55:21 +05:30
volume_rm_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00
wait_test.go enable errcheck linter 2022-04-29 14:06:38 +02:00