-------------------------------------------------------------------

Tue Mar 18 06:51:33 UTC 2025 - Danish Prakash <danish.prakash@suse.com>

​

- Add patch for CVE-2025-22869 (bsc#1239330):

  * 0006-CVE-2025-22869-ssh-limit-the-size-of-the-internal-pa.patch

- Rebase patches:

  * 0001-vendor-update-c-buildah-to-1.33.12.patch

  * 0002-Backport-fix-for-CVE-2024-6104.patch

  * 0003-Switch-hashicorp-go-retryablehttp-to-the-SUSE-fork.patch

  * 0004-http2-close-connections-when-receiving-too-many-head.patch

  * 0005-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch

​

-------------------------------------------------------------------

Mon Mar  3 05:42:37 UTC 2025 - Danish Prakash <danish.prakash@suse.com>

​

- Add patch for CVE-2025-27144 (bsc#1237641):

  * 0005-CVE-2025-27144-vendor-don-t-allow-unbounded-amounts-.patch

- Rebase patches:

  * 0001-vendor-update-c-buildah-to-1.33.12.patch

  * 0002-Backport-fix-for-CVE-2024-6104.patch

  * 0003-Switch-hashicorp-go-retryablehttp-to-the-SUSE-fork.patch

  * 0004-http2-close-connections-when-receiving-too-many-head.patch

​

-------------------------------------------------------------------

Fri Feb  7 14:16:17 UTC 2025 - Danish Prakash <danish.prakash@suse.com>

​

- Add patch for CVE-2023-45288 (bsc#1236507):

  * 0004-http2-close-connections-when-receiving-too-many-head.patch

- Add supplemental patch for CVE-2024-6104 (bsc#1227052):

  * 0003-Switch-hashicorp-go-retryablehttp-to-the-SUSE-fork.patch

- Rebase patches:

  * 0001-vendor-update-c-buildah-to-1.33.12.patch

  * 0002-Backport-fix-for-CVE-2024-6104.patch

​

-------------------------------------------------------------------

Thu Jan 23 07:36:42 UTC 2025 - Danish Prakash <danish.prakash@suse.com>

​

- Add patch for  CVE-2024-11218 (bsc#1236270):

  * 0002-vendor-update-c-buildah-to-1.33.12.patch

- Rebase patch:

  * 0001-Backport-fix-for-CVE-2024-6104.patch

- Removed patches (merged upstream and into the new patch):

  * 0002-pkg-subscriptions-use-securejoin-for-the-container-p.patch

  * 0003-CVE-2024-9407-validate-bind-propagation-flag-setting.patch

  * 0004-Properly-validate-cache-IDs-and-sources.patch

  * 0005-Use-securejoin.SecureJoin-when-forming-userns-paths.patch

​

-------------------------------------------------------------------

Tue Oct 22 06:36:40 UTC 2024 - Danish Prakash <danish.prakash@suse.com>

​

- Add patch for CVE-2024-9676 (bsc#1231698):

  * 0005-Use-securejoin.SecureJoin-when-forming-userns-paths.patch

- Rebase patches:

  * 0001-Backport-fix-for-CVE-2024-6104.patch

  * 0002-pkg-subscriptions-use-securejoin-for-the-container-p.patch

  * 0003-CVE-2024-9407-validate-bind-propagation-flag-setting.patch

  * 0004-Properly-validate-cache-IDs-and-sources.patch

​

-------------------------------------------------------------------

Fri Oct 18 11:45:50 UTC 2024 - Alexandre Vicenzi <alexandre.vicenzi@suse.com>

​

- Load ip_tables and ip6_tables kernel module (bsc#1214612)

  * Required for rootless mode as a regular user has no permission

    to load kernel modules

​

-------------------------------------------------------------------

Tue Oct 15 16:56:51 UTC 2024 - Danish Prakash <danish.prakash@suse.com>

​

- Add patch for CVE-2024-9675 (bsc#1231499):

  * 0004-Properly-validate-cache-IDs-and-sources.patch

- Add patch for CVE-2024-9407 (bsc#1231208):

  * 0003-CVE-2024-9407-validate-bind-propagation-flag-setting.patch

- Rebase patches:

  * 0001-Backport-fix-for-CVE-2024-6104.patch

  * 0002-pkg-subscriptions-use-securejoin-for-the-container-p.patch

​

-------------------------------------------------------------------

Thu Oct  3 07:05:10 UTC 2024 - Danish Prakash <danish.prakash@suse.com>

​

- Add patch for CVE-2024-9341 (bsc#1231230):

  * 0002-pkg-subscriptions-use-securejoin-for-the-container-p.patch

- Rebase patch:

  * 0001-Backport-fix-for-CVE-2024-6104.patch

​

-------------------------------------------------------------------

Mon Jul  1 05:41:23 UTC 2024 - Dan Čermák <dcermak@suse.com>

​

- Add patch to fix bsc#1227052 / CVE-2024-6104:

  * 0001-Backport-fix-for-CVE-2024-6104.patch

- Add missing BuildRequires man

​

-------------------------------------------------------------------

Fri Jun 07 12:56:18 UTC 2024 - danish.prakash@suse.com

​

- Remove upstreamed patches:

  - 0001-CVE-2024-1753-container-escape-fix.patch

- Update to version 4.9.5:

  * Bump to v4.9.5

  * Update release notes for v4.9.5

  * fix "concurrent map writes" in network ls compat endpoint

  * [v4.9] Fix for CVE-2024-3727 (bsc#1224122)

  * Disable failing bud test

  * CI Maintenance: Disable machine tests

  * [CI:DOCS] Allow downgrade of WiX

  * [CI:DOCS] Force WiX 3.11

  * [CI:DOCS] Fix windows installer action

  * Bump to v4.9.5-dev

  * Bump to v4.9.4

  * Update release notes for v4.9.4

  * [v4.9] Bump Buildah to v1.33.7, CVE-2024-1753, CVE-2024-24786 (bsc#1226136)

  * Add farm command to commands list

  * Bump to FreeBSD 13.3 (13.2 vanished)

  * Update health-start-periods docs

  * Don't update health check status during initialDelaySeconds

  * image scp: don't require port for ssh URL

  * Ignore docker's end point config when the final network mode isn't bridge.

  * Fix running container from docker client with rootful in rootless podman.

  * [skip-ci] Packit: remove koji and bodhi tasks for v4.9

  * Bump to v4.9.4-dev

  * Bump to v4.9.3

  * Release notes for v4.9.3

  * Remove gitleaks scanning

  * [v4.9] [skip-ci] packit: update fedora downstream branches

  * @@option volume.image: be specific that -v only affects RUN

  * Accept a config blob alongside the "changes" slice when committing

  * container create: use ParseUserNamespace to parse a user namespace setting

  * Bump to v4.9.3-dev

  * Bump to v4.9.2

  * Release notes for v4.9.2

  * Cirrus: Update operating branch

  * [v4.9] Bump to c/common v0.57.4, buildkit v0.12.5, c/buidah v1.33.5

  * Fix updated runc dep breaking pod devices cgroup

  * systests: kube with policies test: fix race

  * Remove go.mod pin of runc and update to latest

  * systests: kube with policies test: fix race

  * Bump to v4.9.2-dev

  * Bump to v4.9.1

  * Release notes for v4.9.1

  * [v4.9] Bump Buildah to v1.33.4, c/common v0.57.3, c/image v5.29.2

  * pkginstaller: bump Qemu version to 8.2.1

  * Assign separate ports for each appleHV machine

  * Fix machine inspect test config

  * AppleHV: update LastUp time

  * applehv: return socket path from setupAPIForwarding

  * applehv: Remove unneeded cmd.ExtraFiles assignment

  * abi: drop check for IsRootless()

  * system: enhance check for re-exec into rootless userns

  * system: enhance check for re-exec into rootless userns

  * Fix `podman machine set --rootful` for applehv

  * applehv - fix vm lookup

  * rpm: use go-rpm-macros on RHEL 10

  * Bump to v4.9.1-dev

  * Bump to v4.9.0

  * Fix a small grammar error in RELEASE_NOTES.md

  * Fix push endpoint stream

  * Finalized release notes for v4.9.0

  * farm build: push built images to registry

  * Move the --farm flag to farm build command

  * Clean up farm-build miscommit

  * [CI:DOCS] Add podman farm build doc

  * Add release notes for v4.9.0

  * gvproxy: Update to 0.7.2 release

  * [v4.9] Bump Buildah to v1.33.3, c/common to v0.57.2, c/image to v5.29.1

  * Add a net health recovery service to Qemu machines

  * Set up podman machine remote user correctly

  * Remove Libpod special-init conditions

  * Fix `podman system reset` with external containers

  * [v4.8] podman kube play: fix broken annotation parsing

  * feat: disable pid max in the podman machine

  * systests: cp: add wait_for_ready

  * System tests: fixes for RHEL8 gating failures

  * Add API forwarding support for HyperV

  * bump to v4.8.4-dev

​

-------------------------------------------------------------------

Tue Mar 19 14:14:17 UTC 2024 - Alexandre Vicenzi <alexandre.vicenzi@suse.com>

​

- Add patch for CVE-2024-1753 (bsc#1221677):

  0001-CVE-2024-1753-container-escape-fix.patch

​

-------------------------------------------------------------------

Thu Jan 04 05:59:42 UTC 2024 - danish.prakash@suse.com

​

- Update to version 4.8.3:

  * Release v4.8.3

  * Update RELEASE_NOTES.md for v4.8.3

  * update module golang.org/x/crypto to v0.17.0 [security]

  * Error on HyperV VM start when gvproxy has failed to start

  * bump release to v4.8.3-dev

​

-------------------------------------------------------------------

Wed Dec 13 12:51:44 UTC 2023 - Fabian Vogt <fvogt@suse.com>

​

- Refactor network backend dependencies:

  * podman requires either netavark or cni-plugins. On ALP, require

    netavark, otherwise prefer netavark but don't force it.

  * This fixes missing cni-plugins in some scenarios

  * Default to netavark everywhere where it's available

​

-------------------------------------------------------------------

Mon Dec 11 16:13:48 UTC 2023 - kastl@b1-systems.de

​

- Update to version 4.8.2:

  * v4.8.2

  * [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2

  * Kube Play - set ReportWriter when building an image

  * Fix user-mode net init flag on first time install

  * bump c/common to v0.57.1

  * bump version to v4.8.2-dev

​

-------------------------------------------------------------------

Thu Dec  7 08:43:26 UTC 2023 - Danish Prakash <danish.prakash@suse.com>

​

- Default to the new networking backend, netavark, on openSUSE (bsc#1217828)

​

-------------------------------------------------------------------

Wed Dec 06 06:02:02 UTC 2023 - danish.prakash@suse.com

​

- Update to version 4.8.1:

  * v4.8.1

  * Update RELEASE_NOTES.md for v4.8.1

  * Handle symlinks when checking DB vs runtime configs

  * libpod: Detect whether we have a private UTS namespace on FreeBSD

  * pkg/bindings: add new APIVersionError error type

  * fix podman-remote exec regression with v4.8

  * sqlite: fix issue in ValidateDBConfig()

  * sqlite: fix missing Commit() in RemovePodContainers()

  * sqlite: set busy timeout to 100s

  * Fix locking error in WSL machine rm -f

  * Gating test fixes

  * If API calls for kube play --replace, then replace pod

  * Fix wsl.conf generation when user-mode-networking is disabled

  * Bump to v4.8.1-dev

​

-------------------------------------------------------------------

Tue Nov 28 05:56:48 UTC 2023 - danish.prakash@suse.com

​

- Update to version 4.8.0:

  * Bump to v4.8.0

  * Update release notes for 4.8.0

  * Add notes on upcoming deprecations to release notes

  * [v4.8] Bump to Buildah v1.33.2

  * [CI:DOCS] Update release notes

  * machine applehv: create better error on start failure

  * Bump to v4.8.0-dev

  * Bump to v4.8.0-rc1

  * Create release notes for v4.8.0

  * Update release notes from v4.7 branch

  * Cirrus: Update operating branch

  * rootless_tutorial: modernize

  * Bump Buildah to v1.33.1

  * Bump Buildah to v1.33.0

  * Update to libhvee 0.5.0

  * vmtypes names cannot be used as machine names

  * Add support for --compat-auth-file in login/logout

  * Update tests for a c/common error message change

  * Update c/image and c/common to latest, c/buildah to main

  * CI: test overlay and vfs

  * [CI:DOCS] Add link to podman py docs

  * Test fixes for debian

  * pasta tests: remove some skips

  * VM images: bump to 2023-11-16

  * fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]

  * [CI:DOCS] Machine test timeout env var

  * Quadlet - add support for UID and GID Mapping

  * Quadlet - Allow using symlink on the base search paths

  * [skip-ci] Update dessant/lock-threads action to v5

  * Avoid empty SSH keys on applehv

  * qemu,parseUSB: minor refactor

  * fix(deps): update module github.com/gorilla/handlers to v1.5.2

  * docs: fix relabeling command

  * Pass secrets from the host down to internal podman containers

  * (Temporary) Emergency CI fix: quay search is broken

  * Update podman-stats.1.md.in

  * [CI:BUILD] packit: handle builds for RC releases

  * Quadlet test - add case for multi = sign in mount

  * set RLIMIT_NOFILE soft limit to match the hard limit on mac

  * rootless: use functionalities from c/storage

  * CI: e2e: fix a smattering of test bugs that slipped in

  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1

  * vendor: update c/storage

  * Improve the documentation of quadlet

  * Fix socket mapping socket mapping nits

  * fix(deps): update module golang.org/x/tools to v0.15.0

  * fix(deps): update github.com/containers/libhvee digest to 9651e31

  * [skip-ci] Update github/issue-labeler action to v3.3

  * Document --userns=auto behaviour for rootless users

  * machine: qemu: add usb host passthrough

  * fix(deps): update module golang.org/x/net to v0.18.0

  * fix(deps): update module github.com/onsi/gomega to v1.30.0

  * Refactor Ignition configuration for virt providers

  * [CI:BUILD] rpm: disable GOPROXY

  * Automatic code cleanups - JetBrains

  * Refactor key machine objects

  * systests: add [NNN] prefix in logs, NNN = filename

  * systests: add a last-minute check for db backend

  * applehv: allow virtiofs to mount to /

  * Run codespell on podman

  * update completion scripts for cobra v1.8.0

  * Fix man page display of podman-kube-generate

  * Try to fix the broken formatting of man podman‐kube‐apply(1).

  * fix(deps): update module golang.org/x/text to v0.14.0

  * docs: make CNI removal explicit

  * fix(deps): update module github.com/gorilla/mux to v1.8.1

  * fix(deps): update module github.com/spf13/cobra to v1.8.0

  * fix(deps): update module golang.org/x/sync to v0.5.0

  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18

  * Podman push --help should reveal default compression

  * Update container-device-interface (CDI) to v0.6.2

  * fix: adjust helper string in machine_common

  * fix: adjust helper string in machine_common

  * remote,test: remove .dockerignore which is a symlink

  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2

  * fix: adjust helper string in machine_common

  * vendor: update github.com/coreos/go-systemd/v22 to latest main

  * CI: default to sqlite

  * vendor: update c/common

  * check system connections before machine init

  * Consume OCI images for machine image

  * freebsd: drop dead code

  * libpod: make removePodCgroup linux specific

  * containers: drop special handling for ErrCgroupV1Rootless

  * compose: fix compose provider debug message

  * image: replace GetStoreImage with ResolveReference

  * vendor: bump c/image to 373c52a9466f

  * Refactor machine socket mapping

  * AppleHV: Fix machine rm error message

  * Add status messages to podman --remote commit

  * End-of-Life policy for github issues

  * fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10

  * Support passing of Ulimits as -1 to mean max

  * fix(deps): update github.com/docker/go-connections digest to 0b8c1f4

  * fix(deps): update github.com/crc-org/vfkit digest to f3c783d

  * Log gvproxy and server9 to file on log-level=debug

  * Change to using gopsutil for cross-OS process ops

  * Initial addition of 9p code to Podman

  * libpod: fix /etc/hostname with --uts=host

  * systests: stty test: retry once on flake

  * systests: pasta: avoid hangs

  * Fix secrets scanning GHA Workflow

  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0

  * docs: clarify systemd cgroup mount

  * podman build --remote URI Dockerfile shoud not be treated as file

  * Small fixes for wacko CI environments

  * Do not add powercap mask if no paths are masked

  * compose: try all possible providers before throwing an error

  * podman kube play --replace should force removal of pods and containers

  * Sort kube options alphabetically

  * container.conf: support attributed string slices

  * CI: podman farm tests cleanup

  * Mask /sys/devices/virtual/powercap

  * Update module github.com/google/uuid to v1.4.0

  * fix(deps): update module github.com/docker/docker to v24.0.7+incompatible

  * fix(deps): update module go.etcd.io/bbolt to v1.3.8

  * CI: systest: safer random_rfc1918_subnet

  * CI: e2e: safer GetPort()

  * Fix broken code block markup in Introduction.rst

  * chore(deps): update module google.golang.org/grpc to v1.57.1 [security]

  * chore: remove npipe const and use vmtype const for checking

  * Update module github.com/onsi/gomega to v1.29.0

  * CI: try to fix more networking flakes

  * fix: check wsl npipe when executing podman compose

  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1

  * Quadlet - explicit support for read-only-tmpfs

  * compat API: fix image-prune --all

  * Makefile - allow more control over Ginkgo parameters

  * Add e2e tests for farm build

  * vendor c/{buildah,common}: appendable containers.conf strings, Part 1

  * Add podman farm build command

  * Add emulation package

  * Use buildah default isolation when working with podman play kube

  * docs(API): Fix compat network (dis-)connect

  * test/e2e: do not import buildah

  * pkg/specgen: remove config_unsupported.go

  * pkg/parallel/ctr: add !remote tag

  * pkg/domain/filters: add !remote tag

  * pkg/ps: add !remote tag

  * pkg/systemd/generate: add !remote tag

  * libpod: add !remote tag

  * pkg/autoupdate: add !remote tag

  * vendor latest c/common

  * libpod: remove build support non linux/freebsd

  * Fix typo

  * test/apiv2: adapt apiv2 test on cgroups v1 environment

  * ginkgo setup: retry cache pulls

  * Support size option when creating tmpfs volumes

  * not mounted layers should be reported as info not error

  * CI: stop using registry.k8s.io

  * fix(deps): update module github.com/vbatts/git-validation to v1.2.1

  * test fixes for c/common tag chnages

  * vendor latest c/common

  * hyperV: Update lastUp time

  * [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0

  * lint: disable testifylint

  * lint: fix warnings found by perfsprint

  * lint: fix warnings found by inamedparam

  * lint: fix warnings found by protogetter

  * libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon

  * Use node hostname in kube play when hostNetwork=true

  * cirrus setup: special-case perl unicode

  * network: document ports and macvlan interaction

  * quadlet: document cgroupv2 requirement

  * [skip-ci] Update actions/checkout digest to b4ffde6

  * Revert "Emergency workaround for CI breakage"

  * remote: exec: do not leak session IDs on errors

  * fix(deps): update github.com/containers/storage digest to 79aa304

  * fix(deps): update module k8s.io/kubernetes to v1.28.3

  * System tests: fix broken silence127

  * Add TERM iff TERM not defined in container when podman exec -t

  * Emergency workaround for CI breakage

  * Kill gvproxy when machine rm -f

  * Fix path for omvf vars on Darwin/arm64

  * Allow systemd specifiers in User and Group Quadlet keys

  * libpod: rename confusing import name

  * use FindInitBinary() for init binary

  * vendor latest c/common

  * exec: do not leak session IDs on errors

  * systests: cp test: lots of cleanup

  * Define better error message for container name conflicts with external storage.

  * Quadlet - support ImageName for .image files

  * test/system: ignore 127 if it is the expected rc

  * test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1

  * image history: fix walking layers

  * fix(api): Ensure compatibality for network connect

  * [CI:DOCS] Add cross-build target info.

  * machine set: document --rootful better

  * libpod: restart+userns cleanup netns correctly

  * Minor log and doc fixes

  * Quadlet man page - discuss volume removal explicitly

  * Quadlet - add support for KubeDownForce

  * System Test - Quadlet kube oneshot

  * Fix output of podman --remote top

  * buildah-bud: test relative TMPDIR

  * Fix handling of --read-only-tmpfs flag

  * Vendor common and buildah main

  * remote,build: wire unsetlabels

  * test: build with TMPDIR as relative

  * docs: add unsetlabel

  * vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85

  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2

  * fix: pull error response docker rest api compatibility

  * Show client info even if remote connection fails

  * fix(deps): update github.com/containers/libhvee digest to e51be96

  * Run codespell

  * SetLock for all virt providers

  * Machine: Teardown on init failure

  * healthcheck: make sure to always show health_status events

  * Apply suggestions from code review

  * [CI:DOCS]rtd: implement v2 build file

  * Quadlet - support oneshot .kube files

  * libpod: fix deadlock while parallel container create

  * fix(deps): update module golang.org/x/net to v0.17.0

  * api: add `compatMode` paramenter to libpod's pull endpoint

  * api: break out compat image pull

  * fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3

  * use sqlite as default database

  * vendor latest c/common

  * fix(deps): update module github.com/nxadm/tail to v1.4.11

  * Check for image with /libpod/containers/create

  * container: always check if mountpoint is mounted

  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0

  * vendor: update c/storage

  * api: drop debug statement

  * Quadlet - add support for global arguments

  * Add system test

  * fix(deps): update module golang.org/x/tools to v0.14.0

  * Don't ignore containerfiles outside of build context

  * fix(deps): update github.com/containers/libhvee digest to fcf1cc2

  * fix(deps): update module golang.org/x/term to v0.13.0

  * Update module golang.org/x/sys to v0.13.0

  * [CI:DOCS] Add updating version on podman.io to release process

  * containers.conf: add `privileged` field to containers table

  * Implement secrets/credential scanning

  * Cirrus: Execute Windows podman-machine e2e tests

  * vendor: bump c/storage

  * Update module golang.org/x/sync to v0.4.0

  * [CI:DOCS] update swagger version on docs.podman.io

  * Create Qemu command wrapper

  * Adjust to path name change for resolved unit

  * Revert "Fix WSL systemd detection"

  * [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL

  * [CI:DOCS] update kube play delete endpoint docs

  * [CI:DOCS] Remove dead link from README

  * test/system: --env-file test fixes

  * Revert "feat(env): support multiline in env-file"

  * Revert "docs(env-file): improve document description"

  * Revert "fix(env): parsing --env incorrect in cli"

  * Filter health_check and exec events for logging in console

  * inspect: ignore ENOENT during device lookup

  * test, manifest: test push retry

  * Fix locale issues with WSL version detection

  * vendor: update module github.com/docker/distribution to v2.8.3+incompatible

  * vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509

  * Update github.com/containers/libhvee digest to e9b1811

  * windows: Use prebuilt gvproxy/win-sshproxy binaries

  * Volume create - fast exit when ignore is set and volume exists

  * Update golang.org/x/exp digest to 9212866

  * Update github.com/opencontainers/runtime-spec digest to c0e9043

  * remove selinux tag as not needed anymore

  * [skip-ci] Improve podmansh(1)

  * Build applehv for Intel Macs

  * Revert "GHA Workflow: Faster discussion-locking"

  * update vfkit vendored code

  * Add DefaultMode to kube play

  * Fix broken podman images filters

  * Remove `c.ExtraFiles` line in machine

  * podman: run --replace prints only the new container id

  * New machines should show Never as LastUp

  * podman machine: disable zincati update service

  * Revert "cirrus setup: install en_US.UTF-8 locale"

  * Cirrus: CI VM images w/ newer automation-library

  * CI VMs: bump to f39 + f38

  * [CI:DOCS] Update podman load doc

  * Update mac installer to latest gvproxy release

  * Fix WSL systemd detection

  * Add documentation for the vrf option on netavark

  * fix(deps): update github.com/containers/common digest to 9342cdd

  * fix: typos in links, path and code example

  * e2e: ExitCleanly(): manual special cases

  * e2e: ExitCleanly(): the final fron^Wcommit

  * [CI:DOCS] Add win-sshproxy target to winmake

  * wsl: enable machine init tests

  * Update docs/source/markdown/options/rdt-class.md

  * move IntelRdtClosID to HostConfig

  * use default when user does not provide rdt-class

  * Add documentation for Intel RDT support

  * Add test for Intel RDT support

  * Add Intel RDT support

  * [CI:DOCS] Fix podman form update --help examples

  * Quadlet container mount - support non key=val options

  * test/e2e: default to netavark

  * [skip-ci] Update dawidd6/action-send-mail action to v3.9.0

  * fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1

  * fix(deps): update github.com/containers/common digest to 4619314

  * applehv: enable machine tests for start

  * applehv: machine tests for stop and rm

  * Update machine tests README

  * Add podman socket info to machine inspect

  * Fix podman machine info test for hyperV

  * libpod: pass entire environment to conmon

  * e2e: ExitCleanly(): manual fixes to get tests working

  * e2e: ExitCleanly(): a few more

  * FCOS+podman-next: correct GHA conditional syntax

  * pkg/machine/e2e: wsl stop

  * wsl: machine tests for inspect

  * wsl: machine tests for ssh

  * fix(deps): update github.com/containers/common digest to e18cda8

  * wsl: machine start test

  * wsl machine tests: set

  * wsl: machine tests

  * Skip proxy test for hyperV

  * Enable machine e2e test for applehv

  * hyperV: Respect rootful option on machine init

  * [CI:BUILD] FCOS image: enable nightly build

  * e2e: use safe fedora-minimal image

  * hyperv: machine e2e tests for set command

  * podman build: correct default pull policy

  * fix handling of static/volume dir

  * unbreak CI: useradd not found

  * hyperv: set more realistic starting state

  * hyperv: use StopWithForce with remove

  * Fix all ports exposed by kube play

  * Fix setting timezone on HyperV

  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6

  * Fix farm update to check for connections

  * Adjust machine CPU tests

  * Bump version on main

  * [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds

  * Vendor c/common

  * pod rm: do not log error if anonymous volume is still used

  * e2e: ExitCleanly(): manual fixes to get tests passing

  * e2e: ExitCleanly(): a few more

  * fixes for pkg/machine/e2e on hyperv

  * test: fix rootless propagation test

  * [CI:BUILD] packit: tag @containers/packit-build team on copr build failures

  * Enable disk resizing for applehv

  * Various updates for hyperv and machine e2e tests

  * test: update fedoraMinimal version

  * specgen, rootless: fix mount of cgroup without a netns

  * Automatically remove anonymous volumes when removing a container

  * Use ActiveServiceDestination in ssh remoteConnectionUsername

  * fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405

  * e2e: ExitCleanly(): generate_kube_test.go

  * e2e: generate kube -> kube generate

  * e2e: ExitCleanly(): generate_kube_test.go

  * windows cannot "do" extra files

  * e2e: ExitCleanly(): Fixes for breaking tests

  * play kube -> kube play

  * e2e: ExitCleanly(): play_kube_test.go

  * introduce pkg/strongunits

  * Makefile equiv Powershell script

  * pass --syslog to the cleanup process

  * vendor of containers/common

  * fix --authfile auto-update test

  * compat API: speed up network list

  * Change priority for cli-flags for remotely operating Podman

  * libpod: remove unused ContainerState() fucntion

  * [CI:BUILD] Packit: Enable failure notifications for cockpit tests

  * e2e: ExitCleanly(): more low-hanging fruit

  * e2e: ExitCleanly(): more low-hanging fruit

  * fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1

  * Enable machine e2e tests for WSL

  * systests: tighter checks for unwanted warnings

  * GHA Workflow: Faster discussion-locking

  * [CI:BUILD] FCOS + podman-next image: pull in wasm

  * [CI:BUILD] rpm: remove gvproxy subpackage

  * [CI:DOCS] Tweak podman to Podman in a few farm man pages

  * Docs on sig-proxy are wrong, we support TTY

  * e2e: ExitCleanly(): low-hanging fruit, part 2

  * e2e: ExitCleanly(): low-hanging fruit, part 1

  * Buildtag out unix commands for common OS files

  * systests: clean up after tests; fix missing path in logs

  * [CI:BUILD] followup PR for fcos with podman-next

  * Implement gvproxy networking using cmdline wrapper

  * fix, test: rmi should work with images w/o layers

  * vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282

  * Quadlet Image test - rearrange test function

  * e2e: continuing ExitCleanly() work: manual tweaks

  * e2e: continuing ExitCleanly() work

  * [CI:DOCS] Improve podman-tag man page

  * [CI:DOCS] Improve podman-build man page

  * [CI:DOCS] Include precheck to release process

  * [CI:DOCS] consistentize filter options in man pages

  * Quadlet - add support for .image units

  * --env-host: use default from containers.conf

  * error when --module is specified on the command level

  * man page crossrefs: add --filter autocompletes

  * Fix specification of unix:///run

  * Add label! filter and tests to containers and pods

  * Add test for legacy address without two slashes

  * Use url with scheme and path for the unix address

​

-------------------------------------------------------------------

Wed Nov  8 07:48:11 UTC 2023 - Andreas Schwab <schwab@suse.de>

​

- Use crun only on selected archs

​

-------------------------------------------------------------------

Wed Nov 01 07:15:17 UTC 2023 - dcermak@suse.com

​

- Update to version 4.7.2:

  * v4.7.2

  * Update RELEASE_NOTES.md for v4.7.2

  * compose: try all possible providers before throwing an error

  * Mask /sys/devices/virtual/powercap

  * fix: check wsl npipe when executing podman compose

  * rtd: implement v2 build file

  * Adjust to path name change for resolved unit

  * Switch version to 4.7.2-dev

​

-------------------------------------------------------------------

Tue Oct 31 14:35:31 UTC 2023 - Guillaume GARDET <guillaume.gardet@opensuse.org>

​

- crun is not available for armv6 (because of criu), so use runc

  on armv6

​

-------------------------------------------------------------------

Thu Oct 12 09:47:46 UTC 2023 - Dan Čermák <dcermak@suse.com>

​

- Use crun on Tumbleweed & ALP for WASM support

​

-------------------------------------------------------------------

Fri Oct 06 05:50:25 UTC 2023 - danish.prakash@suse.com

​

- podman-docker: Provides docker to avoid conflicts

  when using podman with docker-compose (bsc#1215926)

- Update to version 4.7.1:

  * New version: v4.7.1

  * Update RELEASE_NOTES.md for v4.7.1

  * compat API: speed up network list

  * inspect: ignore ENOENT during device lookup

  * test/system: --env-file test fixes

  * Revert "feat(env): support multiline in env-file"

  * Revert "docs(env-file): improve document description"

  * Revert "fix(env): parsing --env incorrect in cli"

  * [CI:DOCS] update swagger version on docs.podman.io

  * Fix locale issues with WSL version detection

  * switch version to 4.7.1-dev

​

-------------------------------------------------------------------

Fri Sep 29 03:21:32 UTC 2023 - Danish Prakash <danish.prakash@suse.com>

​

- Build against latest stable Go version (bsc#1215807)

​

-------------------------------------------------------------------

Thu Sep 28 04:44:43 UTC 2023 - kastl@b1-systems.de

​

- Update to version 4.7.0:

  * Bump to v4.7.0

  * [CI:DOCS] v4.7.0 RELEASE_NOTES update

  * rpm: remove gvproxy subpackage

  * packit: tag @containers/packit-build team on copr build

    failures

  * specgen, rootless: fix mount of cgroup without a netns

  * pass --syslog to the cleanup process

  * fix --authfile auto-update test

  * version: switch back from -rc1 to -dev

  * New pre-release: v4.7.0-rc1

  * [CI:DOCS] Update release notes for v4.7.0-rc1

  * Cirrus: Update operating branch

  * Move podman build opts to common file

  * Add ability for machine rm -f for WSL

  * Plumbing to run machine tests with hyperv

  * CI: trace setup and runner scripts

  * Bump to Buildah v1.32.0

  * [CI:DOCS] bump release notes on main with the latest release

  * fix(deps): update module github.com/opencontainers/image-spec

    to v1.1.0-rc5

  * Add --filter pod= autocompletion

  * e2e: ExitCleanly(): manual test fixes

  * e2e: continuing ExitCleanly(): just the replacements

  * Fix some spelling and formatting

  * Add support for Ulimit in quadlet

  * Run codespell on code

  * wire in new buildah build options

  * make golangci-lint happy

  * add !remote tag to pkg/specgen/generate

  * pkg/specgen: do not depend on libimage for remote

  * bump buildah to latest

  * [CI:DOCS] restart.md: migrate to container unit

  * fix(deps): update module k8s.io/kubernetes to v1.28.2

  * Add support for PidsLimit in quadlet

  * Add DNS fields to Container and Network unit groups

  * [CI:DOCS] update API docs version list

  * Try to fix broken CI (gvisor-something)

  * e2e: more ExitCleanly(): manual test fixes

  * e2e: more ExitCleanly(): dumb string replacements

  * e2e: create_test: use ExitCleanly()

  * e2e: diff_test: use ExitCleanly()

  * The `podman init` command cannot modify containers.

  * bump c/common to latest main

  * Podmansh: use podmansh_timeout

  * e2e: more ExitCleanly(): low-hanging fruit

  * vendor: update checkpointctl to v1.1.0

  * kube: add DaemonSet support for generate

  * vendor of containers/(common, storage, image)

  * libpod: move oom_score_adj clamp to init

  * e2e: commit_test: use ExitCleanly()

  * e2e: container_clone_test.go: use ExitCleanly()

  * e2e: use ExitCleanly() in cleanup_test.go

  * Ensure HC events fire after logs are written

  * [CI:DOCS] podman-systemd.unit: fix equivalents

  * Add support for kube TerminationGracePeriodSeconds

  * Update podman-kube-play.1.md.in

  * Split up alt binaries to speed up build

  * Switch installer task to EC2

  * pod: fix duplicate volumes from containers.conf

  * tests: add test for pod cgroups

  * libpod: create the cgroup pod before containers

  * cmd, specgen: allow cgroup resources without --infra

  * specgen: allow --share-parent with --infra=false

  * libpod: allow cgroup path without infra container

  * libpod: check if cgroup exists before creating it

  * libpod: refactor platformMakePod signature

  * libpod: destroy pod cgroup on pod stop

  * utils: export MoveUnderCgroup

  * libpod: refactor code to new function

  * e2e: use ExitCleanly() in checkpoint tests

  * [CI:DOCS]Remove use of --latest|-l from tutorial

  * CI test runner: upgrade tests rely on system tests

  * run --rmi: "cannot remove" is a warning, not an error

  * StopContainer: display signal num when name unknown

  * URGENT: fix broken CI

  * Add support for kube  securityContext\.procMount

  * podman: don't restart after kill

  * Tmpfs should not be mounted noexec

  * sys tests: run_podman: check for unwanted warnings/errors

  * chore(deps): update dependency setuptools to ~=68.2.0

  * e2e: use ExitCleanly() in attach & build tests

  * Some distros do not default to docker.io for shortname searches

  * security: accept empty capabilities list

  * systests: random_free_port: fix EADDRINUSE flake

  * fix(deps): update module github.com/cyphar/filepath-securejoin

    to v0.2.4

  * Restrict fcos_test to amd64, arm64

  * fix(deps): update github.com/containers/libhvee digest to

    56fb235

  * fix(deps): update module github.com/docker/docker to

    v24.0.6+incompatible

  * fix(deps): update module golang.org/x/tools to v0.13.0

  * Ignore spurious container-removal errors

  * fix(deps): update module golang.org/x/net to v0.15.0

  * systests: manifest zstd test: lots of tiny cleanups

  * vendor: update github.com/opencontainers/runc to main

  * [skip-ci] Update actions/checkout action to v4

  * linux, rootless: clamp oom_score_adj if it is too low

  * machine: increase max number of inotify instances

  * fix(deps): update module golang.org/x/term to v0.12.0

  * Remove redundant nil checks in system connection remove

  * fix(deps): update module golang.org/x/text to v0.13.0

  * fix(deps): update module golang.org/x/sys to v0.12.0

  * fix(deps): update github.com/containers/libhvee digest to 2bf7930

  * docs(readme): fix a broken link

  * [CI:BUILD] Podman FCOS image from main

  * Update golang.org/x/exp digest to d852ddb

  * Add port forwarding and gvproxy machine test

  * libpod: do not parse --hostuser in base 8

  * fix: default typo

  * Add Japanese locale and translation of index

  * remove rh.container.bot@gmail.com

  * Tweaks and cleanups to prepare hyperv for CI

  * system tests: housekeeping: various small fixes

  * CI: e2e: first use of new ExitCleanly() matcher

  * CI: e2e: new ginkgo matcher, ExitCleanly()

  * CI: e2e: fetch the standard system-test image

  * kube play: fix pull policy

  * Fix gidmap command in example

  * vendor containers/common@12405381ff45

  * manifest,push: support add_compression from containers.conf

  * hyperv ignition: use gvforwarder instead of vm

  * Set remote username earlier for hyperv

  * Added an additional troubleshooting problem and solution

  * Remove a dependency on libimage from pkg/bindings

  * Rename parameter in pkg/bindings

  * Remove a dependency on libimage from pkg/api/handlers

  * Don't re-inspect an image

  * Cirrus: Remove multi-arch podman image builds

  * uid/gid mapping flags

  * [DOC] Clarify default behaviour on uidmap

  * Update containers/common to latest

  * update libhvee

  * /_ping handler: return OSType http header

  * e2e: fix race condition (kube play + logs)

  * Update module github.com/vbauerster/mpb/v8 to v8.6.0

  * Kube - support List documents

  * kube down/play --replace: handle absent objects

  * push, manifest-push: --force-compression must be true with

    --compression-format

  * oci: print stderr only after checking state

  * Updated docs to reflect pod spec sysctls support added in v4.6

  * [CI:BUILD] Packit: Disable unexpected journal message check for

    cockpit-podman

  * [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras

  * Update machine init/set tests

  * Add rootful status to machine inspect

  * Dedup and refactor image acquisition

  * Share podman sock bindings with other WSL distros

  * Fix user-mode validation check

  * system tests: try to fix sdnotify flakes

  * Cirrus: Disable only hello multiarch build

  * Set StopTimeout for service-container started under podman kube

    play

  * Set StopTimeout for compat API if not set by client

  * podman exec should set umask to match container

  * [CI:BUILD] Packit: run cockpit-podman tests in PRs

  * Add infra-name annotations to kube gen/play

  * kube: notifyproxy: close once

  * system service: unset NOTIFY_SOCKET

  * Update module k8s.io/kubernetes to v1.28.1

  * API attach: return vnd.docker.multiplexed-stream header

  * test/apiv2/60-auth.at: use `doesnotexists.podman.io`

  * e2e tests: use registry:2.8.2 (was 2.8)

  * create apiutils package

  * api docs: document stream format

  * Revert "Remove `hello` multi-arch image build"

  * manifest-push: add support for --force-compression

  * push: add support for --force-compression

  * Update module github.com/onsi/ginkgo/v2 to v2.12.0

  * Remove `hello` multi-arch image build

  * hack/perf/system-df.sh: add `df` benchmarks

  * Expand env variables for cmds/entrypoint with format $(ENV)

  * vendor c/storage@6902c2d

  * Ignore the resource limits on cgroups V1 rootless systems

  * Fixups for stopping gvproxy

  * Revert "GHA: Closed issue/PR comment-lock test"

  * GHA: Closed issue/PR comment-lock test

  * GHA: Add workflow to lock closed issues/PRs

  * [CI:DOCS] update auto-update docs

  * chore(deps): update dependency containers/automation_images to

    v20230816

  * fix(deps): update module github.com/google/uuid to v1.3.1

  * libpod: sum per-interface network stats for FreeBSD

  * Set default Umask for `podman kube play`

  * [CI:BUILD] rpm: spdx compatible license field

  * chore(deps): update dependency golangci/golangci-lint to

    v1.54.2

  * Implement automatic port reassignment on Windows

  * Add support for ramfs as well as tmpfs in volume mounts

  * Validate current generation of WSL2 with user-mode-networking

  * use container restart policy if user specifies one

  * Stop gvproxy on hyperv machine stop

  * [CI:BUILD] rpm: depend on man-db

  * Update machine list test

  * Update machine start tests

  * Update machine rm tests

  * libpod: improve conmon error handling

  * cirrus setup: install en_US.UTF-8 locale

  * fixup "podman logs with non ASCII log tag" tests

  * libpod: use /var/run instead of /run on FreeBSD

  * cirrus/lib.sh: extend env to passthrough at start for locale

    work

  * libpod: correctly pass env so alternative locales work

  * cgroups_linux: use SessionBusPrivateNoAutoStartup

  * podmansh man page UID=$(id -u lockedu) is not allowed

  * CI: systests: remove pasta ICMP tests

  * podman.1.md: Fix formatting of exit code 127, clarify wording

    of `exit code` example.

  * document available secret drivers

  * pkg/specgen: add support for read-only root on FreeBSD

  * add --module flag

  * Update dependency setuptools to ~=68.1.0

  * Add riscv64 architecture to the cross build target

  * GetFcosArch add `riscv64` arch

  * Update WSL backend to be compat with FCOS defaults

  * enabled hyperv image downloads

  * fix(deps): update module github.com/containers/ocicrypt to

    v1.1.8

  * [CI:DOCS] Fix git build example in build page

  * CI: e2e manifest_test: use image from quay

  * Cirrus: Remove EC2 experimental flag

  * sphinx: skip options include dir

  * Update rootfs.md: Fix formatting and wording of idmap option

  * fix: Docker API compatible bool deserialization

  * Revert "compat,build: pull must accept string"

  * Add missing verb in machinectl example

  * [CI:DOCS] Update Release Notes and Release Process

  * chore(deps): update dependency golangci/golangci-lint to

    v1.54.1

  * fix podman top missing output flake

  * New partial-line test is flaking

  * [CI:BUILD] Packit: add back fedora-eln targets

  * Cirrus: Prune defunct job + fix noop alias

  * Bump bundled gvproxy to 0.7.0

  * systests: tests for --env and --env-file

  * Update system connection add & remove

  * Add tests for podman farm

  * Add podman farm update command

  * Add podman farm remove command

  * Add podman farm list command

  * Add podman farm create command

  * Add podman farm subcommand

  * CI: e2e: add delay before podman logs or journalctl

  * Add completion for Farms

  * Vendor c/common changes

  * chore(deps): update dependency golangci/golangci-lint to

    v1.54.0

  * file logger: fix podman logs --tail with partial lines

  * fix(env): parsing --env incorrect in cli

  * Update docker.io/library/golang Docker tag to v1.21

  * podman stop --cidfile missing --ignore

  * Skip podman exec cannot be invoked on Debian

  * Re-enable checkpoint test on Debian SID

  * Require a non-generic reason for non-Fedora skip

  * CI FIXME removal/update.

  * Update dependency containers/automation_images to v20230807

  * [skip-ci] Update dawidd6/action-send-mail action to v3.8.0

  * [CI:DOCS] fixed couple typos in build docs

  * Stop timer in function waitPidStop

  * packit: Build PRs into default packit COPRs

  * Add support for host-gateway

  * Ensure volumes-from mounts override image volumes

  * Minor: Include shasums in GHA workflow artifacts

  * Minor: Add important comment to windows GHA workflow

  * Minor: Update/fix dry-run input descriptions

  * [CI:DOCS] Quadlet - provide more information about network

    files

  * man-page xref: check for duplicate entries

  * cp: close temporary file on error path

  * Makefile: work around the lack of 'man -l' on FreeBSD

  * Update module golang.org/x/net to v0.14.0

  * libpod: fix a crash in 'kube generate' on FreeBSD

  * remove temporary files when copy [NO NEW TESTS NEEDED]

  * Update module golang.org/x/sys to v0.11.0

  * [ci] Remove the podman socket in remove_packaged_podman_files()

  * [ci] Correct the podman systemd file names

  * Always show RemoteSocket.Exists in json

  * Fail if ssh key exists

  * Fix regression for hyperv

  * [CI:BUILD] Makefile: rpm target generates correct version

  * Fix nits in #19480

  * Add support for passing container stop timeout as -1 (infinite)

  * pkg/specgen: Add device support for FreeBSD

  * [CI:DOCS] man: remove duplicate entry .LastUp

  * CI: e2e: remove useless test

  * Check tty flag to set default terminal in Env

  * Run codespell on code

  * Deprecate podman generate systemd

  * manifest/push: add support for --add-compression

  * [CI:DOCS]Update Release Notes

  * CI: sys: quadlet %T test: do not rely on journal

  * GHA: Support testing build/sign workflows

  * Remove unnecessary backslashes

  * [docs] Use code blocks for commands in podman-completion

  * Make podman run --rmi automatically set --rm

  * machine: QEMU: recover from failed start

  * vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a

  * secret: add support for `--ignore` with rm

  * Move `writeConfig` logic to shared function

  * Move some logic of `setRootful` to a common file

  * move `removeFilesAndConnections` to a common file

  * Move `waitAPIAndPrintInfo` to common file

  * Move `addSSHConnectionsToPodmanSocket` code to shared file

  * Update module golang.org/x/net to v0.13.0

  * chore(deps): update dependency containers/automation_images to

    v20230726

  * Skip pasta local forwarder test on debian SID

  * Skip broken/flaky blkio-weight test

  * Skip tarball re-inport test in rawhide for CI

  * Cleanup CIDFile on podman-remote run --rm command

  * CI: e2e: remove workaround for missing login file

  * vendor: bump c/image and c/common

  * Add support for confined users

  * Cirrus: Temp. disable rawhide validation task

  * Limit git-validation to 'short-subject'

  * Fix up man page and add test on globs

  * Move alternate image acquisition to separate function

  * Move `getDevNullFiles` into a common file

  * Update github.com/digitalocean/go-qemu digest to 2e3d018

  * Convert QEMU functions to methods with documentation

  * Update docs/source/markdown/podman-build.1.md.in

  * do not redefine gobuild for eln

  * Set default userns from containers.conf file

  * Mention TimeoutStartSec in quadlet man page

  * inspect with network=none show SandboxKey netns path

  * [CI:DOCS] GHA: Use stable go for Mac/Win builds

  * Breakup AppleHV machine funcs

  * Codespell fixups

  * Update docs/source/markdown/podman-stats.1.md.in

  * CI: e2e: reenable containerized checkpoint tests

  * docs(env-file): improve document description

  * Don't log EOF error when using podman --remote build with an

    empty context directory.

  * API: kill: return 409 on invalid state

  * feat(env): support multiline in env-file

  * Adds documentation to new functions that were added

  * `startHostNetworking`: get DevNull files

  * `Remove`: remove network and ready sockets from registry

  * `Remove`: remove files and connections

  * `Remove`: collect files to destroy

  * `Init`: read and split ign file

  * `Init`: write ign config

  * `Init`: add network and registry socks to registry

  * `Init`: add SSH conns to podman sock

  * Improve the description of fields in podman-stats man page

  * make /dev & /dev/shm read/only when --read-only

    --read-only-tmpfs=false

  * Mention no comment lines in Containerfile.in podman-build man

    page

  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream

  * Fix HyperV loadMachineFromJSON function name

  * machine: QEMU: lock VM on stop/rm/set

  * libpod: add 'pod top' support on FreeBSD

  * [CI:DOCS] Build and Sign Mac Pkginstaller

  * Make sure users changes --authfile before checking

  * github: add issue type as link to podman github discussions

  * Break QEMU `config.go` code into its own functions

  * machine: QEMU: lock VM on start

  * libpod: fix 'podman kube generate' on FreeBSD

  * Add glob support to podman run/create --mount

  * kube: add DaemonSet support

  * Fix artifacts script after removal of msitools msi build

  * System tests: quadlet: fix race in %T test

  * If quadlets have same name, only use first

  * Add support for mounts listed in containers.conf

  * Update vendor of containers/common

  * System tests: add test tags

  * [CI:DOCS] socket_activation.md: increase socat timeout

  * go-md2man: use vendored-in version, not system

  * CI: use different TMPDIR on prior-fedora

  * system tests: authfile-exists: minor cleanup

  * start(): don't defer event

  * Fix: use --all in podman stats to get all containers stats

  * Verify authfile exists if user specifies it

  * libpod: don't generate errors for createTimer etc.

  * add "healthy" sdnotify policy

  * Remove LICENSE and general doc files that are installed by the

    main package

  * Add missing `

  * Remove legacy msitools based msi installer

  * Remove any quotes around distribution id

  * add a podman-compose command

  * pkg/specgen: Don't crash for device spec with...

  * fix(deps): update module github.com/docker/docker to

    v24.0.5+incompatible

  * Update vendor of containers/(storage,image)

  * Clean up /var/tmp/ when using oci-archives when creating

    containers

  * [CI:BUILD] RPM: separate out gvproxy for copr and rawhide

  * Reduce qemu machine function sizes

  * [CI:DOCS] migrate socket_activation.md to quadlet

  * [CI:DOCS] Update kube play volume support

  * Fix language, typos and markdown layout

  * [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet

    debug

  * Add note on debugging quadlet unit files

  * Remove unnecessary use of the word "please".

  * libpod: fix FreeBSD 'podman-remote top' default behaviour

  * fix(deps): update module github.com/onsi/gomega to v1.27.9

  * Add support for ShmSize to quadlet

  * Quadlet system test - force journald log driver for short lived

    containers

  * fix(deps): update module github.com/containers/libhvee to

    v0.4.0

  * quadlet recursively scan for unit files

  * Ensure that we appropriately warn that TCP is insecure

  * systests: quadlet: fixes for RHEL8

  * Quadlet - Allow setting Service WorkingDirectory for Kube units

  * Quadlet system test - do not rely on journalctl in kube file

    tests

  * Fix markdown in docs for podman-network-create

  * Man pages: check for corrupt tables

  * quadlet systest: fix broken tmpdir references

  * Add `since` as valid filter option for `volume` subcommands

  * Podmansh: Better error, increase timeout to 30s

  * Fix multiple filter options logic for `podman volume ls `

  * Add bash-completion for podman inspect

  * Fix windows installer

  * Add missing reserved annotation support to `play`

  * Avoid progress hang with empty files

  * Revert the usage of `home.GetConfigHome()`

  * Fix bug report issue template README link

  * Replace error check for non-existent file

  * Emergency gating-test fixes for RHEL8

  * Add progress bar for decompress image

  * refactor: move progressbar to a function

  * Use pkg/homedir to get the home config directory

  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2

  * Should be checking tmpfs versus type not source

  * fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1

  * Enabled arm64 arch for podman applehv provider

  * [CI:BUILD] Packit: remove pre-sync action

  * Add `--podman-only` flag to `podman generate kube`

  * Update vendor containers/(common, buildah, image, storage)

  * Use constants for mount types

  * libpod: use define.TypeBind when resolving container paths

  * Tests: remove/update obsolete skips

  * Fix trust not using local policy file

  * Fix `podman container prune` docs for `--filter`

  * Add more tests for liveness probes with default hostname &

    named ports

  * docs: podman-build --network add slirp and pasta

  * docs: podman run --network mention comma separted names

  * Podman machine AppleHV pass number 3

  * Makefile: `package` -> `rpm`

  * network create: document --internal better

  * pkg/specgen: fix support for --rootfs on FreeBSD

  * machine start: qemu: wait for SSH readiness

  * [CI:BUILD] Packit: downstream task action fix

  * Fix container errors not being sent via pod removal API

  * Add missing return after utils.InternalServerError()

  * Update cmd/podman/login.go

  * [CI:DOCS] Reformat and reorder table with --userns options

  * Add secret support to podman login

  * netavark: macvlan networks keep custom nameservers

  * remote: fix podman-remote play kube --userns

  * fix(deps): update container-device-interface to v0.6.0

  * go mod: no longer use 1.18

  * fix(deps): update module github.com/containers/libhvee to

    v0.3.0

  * chore(deps): update module github.com/gin-gonic/gin to v1.9.1

    [security]

  * Run codespell on code

  * system service: unset listen fds on tcp

  * add hostname to network alias

  * libpod: set cid network alias in setupContainer()

  * AppleHV enablement pass #2

  * e2e: Fetch the correct user name

  * Add `--no-trunc` flag to maintain original annotation length

  * Fix TCP probes when the optional host field is not given

  * Add support for using port names in Kubernetes health probes

  * Fix: cgroup is not set: internal libpod error after os reboot

  * Allow setting volume and network names in Quadlet

  * pasta tests: automatically determine test parameters

  * test/e2e: wait for socket

  * manifest inspect: support authentication

  * api: fix slow version endpoint

  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD

  * CI: remove build without cgo task

  * libpod: use io.Writer vs io.WriteCloser for attach streams

  * top: do not depend on ps(1) in container

  * make --syslog errors non fatal

  * api: fix doc for default ps_args

  * Fixes typo in the path where quadlet looks for files

  * Add --replace flag to podman secret create

  * [CI:DOCS] uidmap man pages: fix corrupt italics

  * [skip-ci] Update github/issue-labeler action to v3.2

  * [CI:DOCS] podman-system-service.1.md: document systemd usage

  * fix(deps): update module github.com/docker/docker to

    v24.0.4+incompatible

  * fix(deps): update module github.com/docker/docker to

    v24.0.3+incompatible

  * Use bytes size consistently instead of human size

  * bugfix: do not try to parse empty ranges

  * [CI:BUILD] Packit: fix pre-sync action for downstream tasks

  * fix(deps): update module golang.org/x/tools to v0.11.0

  * fix(deps): update module golang.org/x/net to v0.12.0

  * fix(deps): update module golang.org/x/term to v0.10.0

  * e2e: fix two toolbox flakes

  * test/e2e: use GinkgoT().TempDir() over MkdirTemp()

  * test/e2e: use random ImageCacheDir

  * test/e2e: remove RHEL7 workaround

  * test/e2e: remove unnecessary code in SynchronizedAfterSuite

  * test/e2e: do not use /tmp for podman commands

  * test/tools: vendor ginkgo v2.11

  * test/e2e: write timings directly to file

  * machine start: qemu: adjust backoffs

  * auto update: fix usage of --authfile

  * system tests: refactor registry code

  * fix(deps): update module golang.org/x/text to v0.11.0

  * pkg/specgen: properly identify image OS on FreeBSD

  * libpod: use new libcontainer BlockIO constructors

  * [CI:BUILD] Minor: Don't confuse osx-debugging

  * [CI:DOCS] Better document the default value of --userns

  * Cirrus: build FreeBSD binaries in a VM

  * Makefile: add support for building freebsd release tarballs

  * [CI:DOCS] uidmap man pages: fix corrupt tables

  * fix(deps): update github.com/crc-org/vfkit digest to c9a4b08

  * fix(deps): update module github.com/containers/buildah to

    v1.31.0

  * fix(deps): update module github.com/opencontainers/image-spec

    to v1.1.0-rc4

  * Use /proc/self/gid_map as intended, not uid_map

  * fix(command): ignore `--format` in `podman search --list-tags`

  * podman machine start: fix ready service

  * Makefile: don't rely on the non-standard -r flag for ln

  * pasta: Create /etc/hosts entries for pods using pasta

    networking

  * fix(deps): update module github.com/containers/libhvee to

    v0.2.0

  * pasta tests: add sanity check for test name vs function

  * pasta tests: cleanup + 1 new test

  * cmd/podman, pkg/domain/infra: sockets should live in /var/run

    on FreeBSD

  * cmd/podman/system: add API server support on FreeBSD

  * [CI:DOCS] Document support of pod security context IDs

  * rootless: use default_rootless_network_cmd config

  * Revert^3 "pasta: Use two connections instead of three in TCP

    range forward tests"

  * pasta: Workaround occasional socat failures in CI

  * pasta: Remove some leftover code from pasta bats tests

  * Bump c/image to v5.26.0, c/common 0.54.0

  * fix(deps): update module github.com/coreos/stream-metadata-go

    to v0.4.3

  * Display secret to user in inpspect

  * [CI:BUILD] RPM: Fix koji and ELN issues

  * e2e: systemd test: major fixes

  * pkg/specgen: add support for 'podman run --init' on FreeBSD

  * Bump version after v4.6 branch cut

  * Remove 'inspecting object' from inspect errors

  * pasta: Fix pasta tests to work on hosts with multiple

    interfaces

  * [CI:DOCS] fix command incorrect in windows

  * Fix readonly=false failure

  * pkg/specgen: Add support for Linux emulation on FreeBSD

  * Fix up podmansh man page

  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs

  * Fixes for vendoring Buildah

  * vendor in latest buildah

  * tests: fix "Storing signatures" check

  * update c/image and c/storage to latest

  * Kube quadlets can support autoupdate as well as containers

  * debug tail 800 lines flake

  * Pass in correct cwd value for hooks exe

  * specgen: honor --device-cgroup-rule with a new user namespace

  * specgen, rootless: raise error with --device-cgroup-rule

  * make image listing more resilient

  * Update module google.golang.org/protobuf to v1.31.0

  * Trim whitespace from unit files while parsing

  * Re-organize hypervisor implementations

  * play.go: remove volumes on down -f

​

-------------------------------------------------------------------

Tue Aug 29 11:07:37 UTC 2023 - danish.prakash@suse.com

​

- Update to version 4.6.2:

  * Bump to v4.6.2

  * Release notes for v4.6.2

  * Packit: Disable unexpected journal message check for cockpit-podman

  * Packit: Restrict cockpit tests to recent Fedoras

  * Packit: run cockpit-podman tests in PRs

  * rpm: spdx compatible license field

  * vendor c/storage@v1.48.1

  * rpm: depend on man-db

  * use container restart policy if user specifies one

  * podmansh man page UID=$(id -u lockedu) is not allowed

  * packit: Build PRs into default packit COPRs

  * Skip tests that fail in gating

  * fix: pull parma parsing for the /build compat ep

  * [CI:DOCS] Update Release Notes

  * Bumpt to v4.6.2-dev

​

-------------------------------------------------------------------

Wed Aug 16 05:27:24 UTC 2023 - Danish Prakash <danish.prakash@suse.com>

​

- Fix build error on SLE due to dangling files clause

  on a discarded file, README.SLE.SUSE

- Fix unexpanded RPM macro error

​

-------------------------------------------------------------------

Fri Aug 11 05:42:19 UTC 2023 - danish.prakash@suse.com

​

- Update to version 4.6.1:

  * Bump to v4.6.1

  * Release notes for v4.6.1

  * Vendor buildah v1.31.2

  * [4.6] vendor c/common v0.55.3

  * [v4.6] Remove zstd:chunked reference

  * [v4.6] bump golang.org/x/net to v0.13.0

  * do not redefine gobuild for eln

  * [CI:BUILD] RPM: define gobuild macro for rhel/centos stream

  * [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora >= 38

  * System tests: add test tags

  * API: kill: return 409 on invalid state

  * Mention TimeoutStartSec in quadlet man page

  * If quadlets have same name, only use first

  * Bump to v4.6.1-dev

​

-------------------------------------------------------------------

Thu Aug  3 13:05:43 UTC 2023 - Danish Prakash <danish.prakash@suse.com>

​

- Discard outdated README.SUSE.SLES

- Recommend gvisor-tap-vsock, required for `podmand machine`

​

-------------------------------------------------------------------

Fri Jul 21 05:26:20 UTC 2023 - danish.prakash@suse.com

​

- Update to version 4.6.0:

  * Bump to v4.6.0

  * Update release notes for v4.6.0

  * Ensure that we appropriately warn that TCP is insecure

  * CI: remove build without cgo task

  * libpod: use io.Writer vs io.WriteCloser for attach streams

  * top: do not depend on ps(1) in container

  * api: fix doc for default ps_args

  * Add more tests for liveness probes with default hostname & named ports

  * Fix TCP probes when the optional host field is not given

  * Add support for using port names in Kubernetes health probes

  * [CI:DOCS] fix command incorrect in windows

  * [CI:DOCS] Reformat and reorder table with --userns options

  * [CI:DOCS] Better document the default value of --userns

  * Add missing return after utils.InternalServerError()

  * Fix markdown in docs for podman-network-create

  * Fix multiple filter options logic for `podman volume ls `

  * Should be checking tmpfs versus type not source

  * Use constants for mount types

  * Fix `podman container prune` docs for `--filter`

  * docs: podman-build --network add slirp and pasta

  * docs: podman run --network mention comma separted names

  * network create: document --internal better

  * pkg/specgen: fix support for --rootfs on FreeBSD

  * systests: quadlet: fixes for RHEL8

  * Fix windows installer

  * Podmansh: Better error, increase timeout to 30s

  * Emergency gating-test fixes for RHEL8

  * Packit: remove pre-sync action

  * [CI:DOCS] Update RELEASE_NOTES.md with Makefile change

  * Bump to v4.6.0-dev

  * Bump to v4.6.0-rc2

  * Makefile: `package` -> `rpm`

  * Update release notes

  * system tests: refactor registry code

  * machine start: qemu: wait for SSH readiness

  * machine start: qemu: adjust backoffs

  * auto update: fix usage of --authfile

  * [CI:BUILD] Packit: downstream task action fix

  * Fix container errors not being sent via pod removal API

  * netavark: macvlan networks keep custom nameservers

  * add hostname to network alias

  * libpod: set cid network alias in setupContainer()

  * Fix: cgroup is not set: internal libpod error after os reboot

  * test/e2e: wait for socket

  * api: fix slow version endpoint

  * manifest inspect: support authentication

  * libpod: don't make a broken symlink for /etc/mtab on FreeBSD

  * make --syslog errors non fatal

  * Fixes typo in the path where quadlet looks for files

  * [CI:DOCS] uidmap man pages: fix corrupt italics

  * [CI:DOCS] podman-system-service.1.md: document systemd usage

  * Use bytes size consistently instead of human size

  * bugfix: do not try to parse empty ranges

  * pkg/specgen: properly identify image OS on FreeBSD

  * [CI:DOCS] Document support of pod security context IDs

  * pkg/specgen: add support for 'podman run --init' on FreeBSD

  * Remove 'inspecting object' from inspect errors

  * Fix readonly=false failure

  * pkg/specgen: Add support for Linux emulation on FreeBSD

  * Fix up podmansh man page

  * Pass in correct cwd value for hooks exe

  * specgen: honor --device-cgroup-rule with a new user namespace

  * specgen, rootless: raise error with --device-cgroup-rule

  * make image listing more resilient

  * Trim whitespace from unit files while parsing

  * play.go: remove volumes on down -f

  * Vendor c/common v0.55.2

  * system service: unset listen fds on tcp

  * [CI:DOCS] [Release Notes]: add static routes

  * [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md

  * [CI:DOCS] uidmap man pages: fix corrupt tables

  * libpod: use new libcontainer BlockIO constructors

  * Bump to v4.6.0-dev

  * Bump to v4.6.0-rc1

  * Bump to v4.6.1-dev

  * Bump to v4.6.0

  * Release notes for v4.6.0

  * Update Release Notes for v4.5.1

  * rootless: use default_rootless_network_cmd config

  * tests: fix "Storing signatures" check

  * Fixes for vendoring Buildah

  * Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs

  * Do not use deprecated hook functions from c/common

  * Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0

  * pasta: Remove some leftover code from pasta bats tests

  * pasta: Fix pasta tests to work on hosts with multiple interfaces

  * fix(command): ignore `--format` in `podman search --list-tags`

  * Use /proc/self/gid_map as intended, not uid_map

  * podman machine start: fix ready service

  * Makefile: don't rely on the non-standard -r flag for ln

  * cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD

  * cmd/podman/system: add API server support on FreeBSD

  * pasta: Create /etc/hosts entries for pods using pasta networking

  * RPM: Fix koji and ELN issues

  * Cirrus: Update operating branch

  * system tests: add and use _prefetch

  * pkg/api: BufferedResponseWriter flush correctly

  * pkg/api: top return error to client

  * container wait: support health states

  * [CI:DOCS] Fix example on PublishPort

  * container wait API: use string slice instead of state slice

  * podman wait: update man page

  * StopContainer(): ignore one more conmon warning

  * run,create: modify `--env-merge` behavior for non-existent vars

  * use libnetwork/slirp4netns from c/common

  * update c/common to latest

  * e2e: use parallel-safe /dev subdirectories

  * [CI:BUILD] Help Renovate manage the golangci-lint version

  * systests: test instrumentation

  * compat API create/pull: fix error handling

  * compat API push: fix error handling

  * GetSafeIPAddress(): discourage its use

  * libpod: write /etc/{hosts,resolv.conf} once

  * e2e: fix one of the many log flakes

  * cmd, push: expose --compression-level

  * vendor: bump containers/common

  * compat API container create: handle platform parameter

  * refactor(machine): remove hard code

  * vendor in latests containers/common

  * fix(machine): throw `connect: connection refused` after set proxy

  * [CI:BUILD] Packit: cleanups

  * Add console mode to podman machine

  * e2e: kube test: specify expected exit code

  * e2e --authfile test: fix test condition

  * chore(deps): update dependency setuptools to v68

  * make lint: re-enable revive

  * make lint: re-enable ginkgolinter

  * make lint: enable rowserrcheck

  * make lint: enable wastedassign

  * make lint: enable mirror

  * bump golangci-lint to v1.53.3

  * auto update: restart instead of stop+start

  * cmd/podman/root.go: fix help document issue of the image store

  * vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c

  * podman: add support for splitting imagestore

  * network create --ip-range allow for custom range

  * fix(ssh): start machine failed to start with exit status 255

  * remote wait: fix "removed" condition

  * [CI:DOCS] Fix service_destinations description in podman man page

  * quadlet should exit non zero on failures

  * fix(deps): update module golang.org/x/tools to v0.10.0

  * e2e: GetSafeIPAddress() replaces GetRandomIPAddress

  * pasta: use code from c/common

  * Add support for setting autoupdate in quadlet

  * New command: podmansh

  * vendor: update c/common to latest

  * Add quadlet container support for Mask,Umask options

  * libpod: make conmon always log to syslog

  * Document how to get secret mounts working on RHEL8

  * Verify podman pull dup image only prints id once

  * Vendor in latests containers/common

  * Apply suggestions from code review

  * Revert "rootlessport: exclude storage drivers via build tags"

  * filters: use new FilterID function from c/common

  * logformatter: ignore 'TOP-LEVEL' headings

  * test/e2e: fix network ID test

  * update c/{common,image,storage} to latest

  * [CI:DOCS] clarify supported transports in manifest push

  * [CI:DOCS] podman-push: rm confusion on supported transports

  * container wait: indicate timeout in error

  * network-create: document new bclim option

  * fix(deps): update module golang.org/x/text to v0.10.0

  * libpod: Podman info output more network information

  * fix(deps): update module golang.org/x/term to v0.9.0

  * quadlet: adjust container unit documentation

  * e2e: GetRandomIPAddress(): parallelize

  * Makefile: add support for 'make help' on FreeBSD

  * criu: return error when checking for min version

  * Update docs/source/markdown/podman-systemd.unit.5.md

  * 250-systemd.bats: remove outdated comment

  * github: add issue type as link to podman-desktop

  * Add WorkingDir support to quadlet

  * rootlessport: exclude storage drivers via build tags

  * Add ability to set static routes

  * test/upgrade: correctly share mounts between host and container

  * Update common, image, and storage deps

  * Fix system service manpage name in API Documentation

  * style(specgen): omit nil check

  * fix(specgen): index out of range when unmask=[]

  * Makefile to force a shell when running command

  * cirrus,ci: default to overlay for debian env

  * Quadlet: Add support for --sysctl flag

  * chore(deps): update dependency requests-mock to ~=1.11.0

  * Ignore spurious warnings when killing containers

  * Makefile: don't hard-code the path for bash

  * fix(deps): update module github.com/burntsushi/toml to v1.3.2

  * GHA: Fix bad job-names & links in monitoring emails

  * podman-registry: simpler, safer invocations

  * Ensure our mutexes handle recursive locking properly

  * Fix an expected error message from pod removal

  * Fix a race removing multiple containers in the same pod

  * Discard errors when a pod is already removed

  * Change Inherit to use a pointer to a container

  * e2e: add ginkgo decorators to address flakes

  * filters: better handling of id=

  * fix(deps): update module github.com/onsi/gomega to v1.27.8

  * refactor: improve get ssh path duplicate code

  * logformatter: better recognition of ginkgo test names

  * Address review feedback and add manpage notes

  * Add support for SecurityLabelNested flag in quadlet

  * fix(deps): update module github.com/burntsushi/toml to v1.3.1

  * `system locks` now reports held locks

  * fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17

  * Add a new hidden command, podman system locks

  * Add number of free locks to `podman info`

  * Include lock number in pod/container/volume inspect

  * fix ignition config creation

  * Makefile binaries target adopted for Mac and Win

  * fix(deps): update github.com/crc-org/vfkit digest to 3d57f09

  * logformatter: proper status color for failed tests

  * pasta: Test handling of unknown protocols

  * pasta: Correct handling of unknown protocols

  * Quadlet - add support for Pull key in .container

  * fix(deps): update module github.com/sirupsen/logrus to v1.9.3

  * Add default ulimit test for gen kube

  * feat: add insecure registry troubleshooting solution

  * fix(deps): update module golang.org/x/tools to v0.9.3

  * fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2

  * e2e: GetPort(): safer allocation of random ports

  * The removeContainer function now accepts a struct

  * Revert "test/e2e: fix "podman run ipcns ipcmk container test""

  * Add a test for removing dependencies with rm -fa

  * Revert "ginkgo-v2 cleanup workaround for #18180"

  * Fix a deadlock when removing pods

  * Pods now return what containers were removed with them

  * Make RemoveContainer return containers and pods removed

  * Add an API for removing a container and dependencies

  * systests: fixes for coping with extra systemd image

  * libpod: fix timezone handling