| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Closes: https://github.com/gentoo/gentoo/pull/36043
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/36031
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
| |
Bug: https://bugs.gentoo.org/927500
Bug: https://bugs.gentoo.org/927501
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
|
|
|
| |
Signed-off-by: Jakov Smolić <jsmolic@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
also backported some niceities from 5.x ebuild
* fix failed build with python-exec[-native-symlinks]
* improvments in init.d/podman, add podman-restart and
podman-clean-transient scripts, add podman-auto-update cronjob
Bug: https://bugs.gentoo.org/927500
Bug: https://bugs.gentoo.org/927501
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/35929
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
1) Podman 5 drops old, slow & insecure stack in favour of shiny new one:
* slirp4netns -> passt/pasta
* runc -> crun
* cni-plugins -> netavark + aardvark-dns
* cgroupv1 -> cgroupv2
2) remove USE flags: cgroup-hybrid, init, rootless, fuse because ...
* cgroupv1 support is deprecated.
* app-containers/catatonit, net-misc/passt, sys-fs/fuse-overlayfs are very minimal
dependencies, <1M of installed size in <30s of compile time (ofc it
varies).
* These flags didn't do much except pulling in dependencies. So suppose
someone goes from -init to +init they've to compile whole podman again,
instead of just emerging catatonit.
* Forcing fuse-overlayfs on users makes sure to have a default graph driver in
rootless mode. containers-storage(5)
3) add python-any-r1.elcass to fix python-exec[-native-symlinks]
Closes: https://bugs.gentoo.org/877719
Closes: https://bugs.gentoo.org/906073
Bug: https://bugs.gentoo.org/show_bug.cgi?id=927501
Bug: https://bugs.gentoo.org/show_bug.cgi?id=927500
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/35766
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
podman-cleanup-transient:
This service runs once each boot to remove potential leftover
container state from previous boots.
This is needed when using transient storage mode in podman where the
database and other configs are stored in tmpfs, but some other files
are not. If we don't run this after an unclean boot then there may
be some leftover files that grow over time.
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/35766
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Closes: https://github.com/gentoo/gentoo/pull/35663
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Closes: https://github.com/gentoo/gentoo/pull/35637
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
|
| |
1. rewrite podman.initd
2. Add cron job which executes daily mimicking podman-auto-update.{service,timer} along
with USE flag `cron`
3. Add podman-restart.initd which starts and stops all containers with
restart-policy set to always
Closes: https://github.com/gentoo/gentoo/pull/33621
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
| |
Bug: https://bugs.gentoo.org/906073
Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Closes: https://github.com/gentoo/gentoo/pull/35375
Signed-off-by: Florian Schmaus <flow@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/35261
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
| |
See: https://github.com/gentoo/gentoo/pull/35240#pullrequestreview-1873395014
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
| |
Suprisingly there are no build-process changes
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Closes: https://github.com/gentoo/gentoo/pull/35240
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
| |
This release addresses a number of Buildkit vulnerabilities including but not limited to: CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653.
Bug: https://bugs.gentoo.org/923751
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Upstream changelog:
Features:
* The podman farm suite of commands for multi-architecture builds is now fully enabled and documented.
* Add a network recovery service to Podman Machine VMs using the QEMU backend to detect and recover from an inoperable host networking issues experienced by Mac users when running for long periods of time.
Bugfixes:
* Fixed a bug where the HyperV provider for podman machine did not forward the API socket to the host machine.
* Fixed a bug where improperly formatted annotations passed to podman kube play could cause Podman to panic.
* Fixed a bug where podman system reset could fail if non-Podman containers (e.g. containers created by Buildah) were present.
Misc:
* Containers run in podman machine VMs now default to a PID limit of unlimited, instead of 2048.
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
| |
Bug: https://bugs.gentoo.org/921290
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Bug: https://bugs.gentoo.org/921290
Closes: https://github.com/gentoo/gentoo/pull/34617
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
| |
Security
* Fixed GHSA-45x7-px36-x8w8
(https://github.com/advisories/GHSA-45x7-px36-x8w8) : CVE-2023-48795 by vendoring golang.org/x/crypto v0.17.0.
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Bug: https://bugs.gentoo.org/921290
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
| |
I promise this is the final email change...unless I become dev and get @gentoo.org
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Closes: https://github.com/gentoo/gentoo/pull/34557
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.website>
Closes: https://github.com/gentoo/gentoo/pull/34236
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.website>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.website>
Closes: https://github.com/gentoo/gentoo/pull/34142
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <me@rahil.website>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
|
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
|
|
|
|
|
|
|
| |
first release where not a single change was needed. Soooo satisfying.
Signed-off-by: Rahil Bhimjiani <me@rahil.website>
Closes: https://github.com/gentoo/gentoo/pull/34021
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
| |
1. Adding support for _rc versions
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Closes: https://github.com/gentoo/gentoo/pull/33921
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Closes: https://github.com/gentoo/gentoo/pull/33897
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
4.7.2 fixes security issue
https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p
Just to be safe removing 4.7.0 and 4.7.1 as well.
For non-live versions, prevent git operations which causes sandbox violations
https://github.com/gentoo/gentoo/pull/33531#issuecomment-1786107493
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Closes: https://github.com/gentoo/gentoo/pull/33607
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
| |
Fix ordering of maintainers
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Signed-off-by: Mike Gilbert <floppym@gentoo.org>
|
|
|
|
|
|
|
|
|
| |
Cleanup SELinux tag related file as it is always
enabled (https://github.com/containers/podman/commit/229734c10a3d07d18137f1e46ccdb02331c13fd2)
Closes: https://github.com/gentoo/gentoo/pull/33196
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
|
|
| |
Major rewrite based on upstream's instructions. Introducing 3 more USE
flags - systemd, seccomp, wrapper (provides docker command)
Closes: https://github.com/gentoo/gentoo/pull/33070
Closes: https://bugs.gentoo.org/911537
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
| |
Signed-off-by: Yixun Lan <dlan@gentoo.org>
|
|
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
few improvements to ebuild.
1) use shell-completion.eclass replacing bash-completino-r1
2) add app-containers/containers-common as dep & adjust other deps
3) dont install seccomp.json,policy.json,registries.conf as it is
installed by containers-common
4) removed non-amd64 keywords as containers-common is only available on
amd64 for now
I'll soon be working on podman version bump with live version too.
Closes: https://github.com/gentoo/gentoo/pull/33030
Closes: https://bugs.gentoo.org/902569
Closes: https://bugs.gentoo.org/849863
Closes: https://bugs.gentoo.org/914597
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
| |
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
| |
and adding bugs-to & docs link
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
| |
Signed-off-by: Sam James <sam@gentoo.org>
|
|
|
|
| |
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
|
|
|
|
|
|
|
| |
Closes: https://bugs.gentoo.org/847025
Closes: https://bugs.gentoo.org/895858
Closes: https://bugs.gentoo.org/903285
Closes: https://bugs.gentoo.org/904399
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
|
|
|
|
|
|
|
|
| |
Without prefix, the podman path generated by quadlet was targetting
/usr/local/bin/podman (instead of /usr/bin/podman)
Closes: https://bugs.gentoo.org/895956
Signed-off-by: Mathieu Tortuyaux <mtortuyaux@microsoft.com>
Closes: https://github.com/gentoo/gentoo/pull/30264
Signed-off-by: Sam James <sam@gentoo.org>
|