summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* app-containers/podman: add 5.0.1Rahil Bhimjiani2024-04-012-0/+129
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Closes: https://github.com/gentoo/gentoo/pull/36043 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: cleanup unused filesRahil Bhimjiani2024-03-312-31/+0
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> From: https://github.com/gentoo/gentoo/pull/36031 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: drop 4.9.3Zac Medico2024-03-312-142/+0
| | | | | | Bug: https://bugs.gentoo.org/927500 Bug: https://bugs.gentoo.org/927501 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: Stabilize 4.9.4 arm64, #928282Arthur Zamarin2024-03-311-1/+1
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* app-containers/podman: Stabilize 4.9.4 amd64, #928282Jakov Smolić2024-03-311-1/+1
| | | | Signed-off-by: Jakov Smolić <jsmolic@gentoo.org>
* app-containers/podman: 4.9.4 fixes CVE-2024-1753 and CVE-2024-24786Rahil Bhimjiani2024-03-262-0/+157
| | | | | | | | | | | | | also backported some niceities from 5.x ebuild * fix failed build with python-exec[-native-symlinks] * improvments in init.d/podman, add podman-restart and podman-clean-transient scripts, add podman-auto-update cronjob Bug: https://bugs.gentoo.org/927500 Bug: https://bugs.gentoo.org/927501 Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> From: https://github.com/gentoo/gentoo/pull/35929 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: update to 5.0.0Rahil Bhimjiani2024-03-236-60/+160
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1) Podman 5 drops old, slow & insecure stack in favour of shiny new one: * slirp4netns -> passt/pasta * runc -> crun * cni-plugins -> netavark + aardvark-dns * cgroupv1 -> cgroupv2 2) remove USE flags: cgroup-hybrid, init, rootless, fuse because ... * cgroupv1 support is deprecated. * app-containers/catatonit, net-misc/passt, sys-fs/fuse-overlayfs are very minimal dependencies, <1M of installed size in <30s of compile time (ofc it varies). * These flags didn't do much except pulling in dependencies. So suppose someone goes from -init to +init they've to compile whole podman again, instead of just emerging catatonit. * Forcing fuse-overlayfs on users makes sure to have a default graph driver in rootless mode. containers-storage(5) 3) add python-any-r1.elcass to fix python-exec[-native-symlinks] Closes: https://bugs.gentoo.org/877719 Closes: https://bugs.gentoo.org/906073 Bug: https://bugs.gentoo.org/show_bug.cgi?id=927501 Bug: https://bugs.gentoo.org/show_bug.cgi?id=927500 Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: remove 4.8.3 and 5.0.0_rc{5,7}Rahil Bhimjiani2024-03-234-441/+0
| | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: drop 5.0.0_rc4Rahil Bhimjiani2024-03-162-149/+0
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> From: https://github.com/gentoo/gentoo/pull/35766 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 5.0.0_rc7 with new openrc serviceRahil Bhimjiani2024-03-165-0/+180
| | | | | | | | | | | | | | | podman-cleanup-transient: This service runs once each boot to remove potential leftover container state from previous boots. This is needed when using transient storage mode in podman where the database and other configs are stored in tmpfs, but some other files are not. If we don't run this after an unclean boot then there may be some leftover files that grow over time. Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> From: https://github.com/gentoo/gentoo/pull/35766 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: Stabilize 4.9.3 amd64, #927046Sam James2024-03-151-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: Stabilize 4.9.3 arm64, #927046Sam James2024-03-151-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: add 5.0.0_rc5Rahil Bhimjiani2024-03-072-0/+149
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Closes: https://github.com/gentoo/gentoo/pull/35663 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: drop 4.9.{1,2} and 5.0.0_rc{1,3}Rahil Bhimjiani2024-03-065-564/+0
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Closes: https://github.com/gentoo/gentoo/pull/35637 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 5.0.0_rc4 and goodiesRahil Bhimjiani2024-03-069-3/+232
| | | | | | | | | | | | 1. rewrite podman.initd 2. Add cron job which executes daily mimicking podman-auto-update.{service,timer} along with USE flag `cron` 3. Add podman-restart.initd which starts and stops all containers with restart-policy set to always Closes: https://github.com/gentoo/gentoo/pull/33621 Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: Apply musl-1.2.4 largefile workaroundAndreas K. Hüttel2024-03-037-0/+21
| | | | | Bug: https://bugs.gentoo.org/906073 Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
* app-containers/podman: add 5.0.0_rc3Rahil Bhimjiani2024-02-282-0/+139
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Closes: https://github.com/gentoo/gentoo/pull/35375 Signed-off-by: Florian Schmaus <flow@gentoo.org>
* app-containers/podman: add 4.9.3Rahil Bhimjiani2024-02-142-0/+139
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> From: https://github.com/gentoo/gentoo/pull/35261 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: unkeyword 5.0.0_rc1 for ~amd64, ~arm64, ~riscvZac Medico2024-02-092-2/+6
| | | | | See: https://github.com/gentoo/gentoo/pull/35240#pullrequestreview-1873395014 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 5.0.0_rc1Rahil Bhimjiani2024-02-092-0/+137
| | | | | | | | Suprisingly there are no build-process changes Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Closes: https://github.com/gentoo/gentoo/pull/35240 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 4.9.2Rahil Bhimjiani2024-02-072-0/+137
| | | | | | | | This release addresses a number of Buildkit vulnerabilities including but not limited to: CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653. Bug: https://bugs.gentoo.org/923751 Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 4.9.1Rahil Bhimjiani2024-02-013-1/+138
| | | | | | | | | | | | | | | | | | | Upstream changelog: Features: * The podman farm suite of commands for multi-architecture builds is now fully enabled and documented. * Add a network recovery service to Podman Machine VMs using the QEMU backend to detect and recover from an inoperable host networking issues experienced by Mac users when running for long periods of time. Bugfixes: * Fixed a bug where the HyperV provider for podman machine did not forward the API socket to the host machine. * Fixed a bug where improperly formatted annotations passed to podman kube play could cause Podman to panic. * Fixed a bug where podman system reset could fail if non-Podman containers (e.g. containers created by Buildah) were present. Misc: * Containers run in podman machine VMs now default to a PID limit of unlimited, instead of 2048. Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: drop 4.7.2, 4.8.1, 4.8.2Zac Medico2024-01-084-410/+0
| | | | | Bug: https://bugs.gentoo.org/921290 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: Stabilize 4.8.3 arm64, #921291Sam James2024-01-041-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: Stabilize 4.8.3 amd64, #921291Sam James2024-01-041-2/+2
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: drop 4.5.xRahil Bhimjiani2024-01-033-322/+0
| | | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Bug: https://bugs.gentoo.org/921290 Closes: https://github.com/gentoo/gentoo/pull/34617 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 4.8.3Rahil Bhimjiani2024-01-032-0/+137
| | | | | | | | | | | Security * Fixed GHSA-45x7-px36-x8w8 (https://github.com/advisories/GHSA-45x7-px36-x8w8) : CVE-2023-48795 by vendoring golang.org/x/crypto v0.17.0. Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Bug: https://bugs.gentoo.org/921290 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* */*: change emailRahil Bhimjiani2023-12-301-1/+1
| | | | | | | | I promise this is the final email change...unless I become dev and get @gentoo.org Signed-off-by: Rahil Bhimjiani <me@rahil.rocks> Closes: https://github.com/gentoo/gentoo/pull/34557 Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: drop 4.8.0Rahil Bhimjiani2023-12-172-137/+0
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.website> Closes: https://github.com/gentoo/gentoo/pull/34236 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 4.8.2Rahil Bhimjiani2023-12-172-0/+137
| | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.website> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: drop 4.8.0_rc1Rahil Bhimjiani2023-12-052-137/+0
| | | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.website> Closes: https://github.com/gentoo/gentoo/pull/34142 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 4.8.1Rahil Bhimjiani2023-12-052-0/+137
| | | | | Signed-off-by: Rahil Bhimjiani <me@rahil.website> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: Stabilize 4.7.2 amd64, #918681Arthur Zamarin2023-11-281-1/+1
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* app-containers/podman: Stabilize 4.7.2 arm64, #918681Arthur Zamarin2023-11-281-1/+1
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* app-containers/podman: add 4.8.0Rahil Bhimjiani2023-11-272-0/+137
| | | | | | | | first release where not a single change was needed. Soooo satisfying. Signed-off-by: Rahil Bhimjiani <me@rahil.website> Closes: https://github.com/gentoo/gentoo/pull/34021 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 4.8.0_rc1Rahil Bhimjiani2023-11-213-1/+139
| | | | | | | | 1. Adding support for _rc versions Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/33921 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* */*: change my email id in metadata.xmlRahil Bhimjiani2023-11-181-1/+1
| | | | | | Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/33897 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 4.7.2, drop 4.7.{0,1}, update liveRahil Bhimjiani2023-11-014-132/+31
| | | | | | | | | | | | | | 4.7.2 fixes security issue https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p Just to be safe removing 4.7.0 and 4.7.1 as well. For non-live versions, prevent git operations which causes sandbox violations https://github.com/gentoo/gentoo/pull/33531#issuecomment-1786107493 Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Closes: https://github.com/gentoo/gentoo/pull/33607 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: fix metadata.xmlRahil Bhimjiani2023-10-311-4/+4
| | | | | | | Fix ordering of maintainers Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* app-containers/podman: update live & 4.7.1Rahil Bhimjiani2023-10-053-2/+129
| | | | | | | | | Cleanup SELinux tag related file as it is always enabled (https://github.com/containers/podman/commit/229734c10a3d07d18137f1e46ccdb02331c13fd2) Closes: https://github.com/gentoo/gentoo/pull/33196 Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: add 4.7.0 & liveRahil Bhimjiani2023-09-295-1/+264
| | | | | | | | | | Major rewrite based on upstream's instructions. Introducing 3 more USE flags - systemd, seccomp, wrapper (provides docker command) Closes: https://github.com/gentoo/gentoo/pull/33070 Closes: https://bugs.gentoo.org/911537 Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: Keyword 4.5.0-r1 riscv, #914624Yixun Lan2023-09-271-1/+1
| | | | Signed-off-by: Yixun Lan <dlan@gentoo.org>
* app-containers/podman: Keyword 4.5.0-r1 arm64, #914624Sam James2023-09-251-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: add 4.5.0-r1Rahil Bhimjiani2023-09-241-0/+149
| | | | | | | | | | | | | | | | | | | | few improvements to ebuild. 1) use shell-completion.eclass replacing bash-completino-r1 2) add app-containers/containers-common as dep & adjust other deps 3) dont install seccomp.json,policy.json,registries.conf as it is installed by containers-common 4) removed non-amd64 keywords as containers-common is only available on amd64 for now I'll soon be working on podman version bump with live version too. Closes: https://github.com/gentoo/gentoo/pull/33030 Closes: https://bugs.gentoo.org/902569 Closes: https://bugs.gentoo.org/849863 Closes: https://bugs.gentoo.org/914597 Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: drop 4.3.1 & 4.4.1Rahil Bhimjiani2023-09-243-333/+0
| | | | | Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: proxy-maint + myselfRahil Bhimjiani2023-09-241-0/+10
| | | | | | | and adding bugs-to & docs link Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com> Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: Stabilize 4.5.0 amd64, #908200Sam James2023-06-101-1/+1
| | | | Signed-off-by: Sam James <sam@gentoo.org>
* app-containers/podman: Stabilize 4.5.0 arm64, #908200Arthur Zamarin2023-06-091-1/+1
| | | | Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
* app-containers/podman: add 4.5.0Zac Medico2023-05-082-0/+173
| | | | | | | | Closes: https://bugs.gentoo.org/847025 Closes: https://bugs.gentoo.org/895858 Closes: https://bugs.gentoo.org/903285 Closes: https://bugs.gentoo.org/904399 Signed-off-by: Zac Medico <zmedico@gentoo.org>
* app-containers/podman: fix quadlet generation issueMathieu Tortuyaux2023-03-221-0/+1
| | | | | | | | | | Without prefix, the podman path generated by quadlet was targetting /usr/local/bin/podman (instead of /usr/bin/podman) Closes: https://bugs.gentoo.org/895956 Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com> Closes: https://github.com/gentoo/gentoo/pull/30264 Signed-off-by: Sam James <sam@gentoo.org>