aboutsummaryrefslogtreecommitdiff
path: root/utils/podman
Commit message (Collapse)AuthorAge
* podman: update to v4.4.2Oskari Rauta2023-02-27
| | | | | | | | | | | | | | | | | Security: - This release fixes CVE-2023-0778, which allowed a malicious user to potentially replace a normal file in a volume with a symlink while exporting the volume, allowing for access to arbitrary files on the host file system. Bugfixes: - Fixed a bug where containers started via the podman-kube systemd template would always use the "passthrough" log driver (#17482). - Fixed a bug where pulls would unexpectedly encounter an EOF error. Now, Podman automatically transparently resumes aborted pull connections. - Fixed a race condition in Podman's signal proxy. Misc: - Updated the containers/image library to v5.24.1. Patch also refreshed Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: update 4.4.1Oskari Rauta2023-02-17
| | | | | | | | | | | | | | | | | patch refreshed. Changes - Added the podman-systemd.unit man page, which can also be displayed using man quadlet (#17349). - Documented journald identifiers used in the journald backend for the podman events command. Bugfixes - Fixed a bug where the default handling of pids-limit was incorrect. - Fixed a bug where parallel calls to make docs crashed (#17322). - Fixed a regression in the podman kube play command where existing resources got mistakenly removed. Full list of changes: [Release notes](https://github.com/containers/podman/blob/main/RELEASE_NOTES.md) Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: update to 4.3.1Oskari Rauta2023-01-16
| | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: update to 4.1.0Oskari Rauta2022-05-10
| | | | | | | | Once again, a lot of changes. List of changes available at: https://github.com/containers/podman/releases Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: updates podman packageOskari Rauta2022-03-16
| | | | | | | | - add missing runtime depency catatonit - removed SELinux variant, add config option for it instead, I do not believe we need variant of EVERY SELinux support capable software - add config option for iptables firewall setup in default cni network config, otherwise skip iptables part (part of nftables transition, use cni-plugins-nft for nftables fw support or better; forget about cni fw completely, instead use openwrt's own as that way your rules for containers do not disappear on firewall restart) Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: update to version 4.0.2Oskari Rauta2022-03-02
| | | | | | | - Patch had became obsolete, it's contents were merged to upstream. Patch removed. - Version updated, long list of changes is available at https://github.com/containers/podman/releases Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: update to v3.4.4Oskari Rauta2021-12-16
| | | | | | | | | | | | | | | list of changes: https://github.com/containers/podman/releases Added patch for compiling with musl. Patch can be removed on next release as it is already merged to podman git but not on this release. Patch moves definition in source so definition is available before it is being used. Patch source: https://github.com/containers/podman/pull/12564 Patch re-created with quilt. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: update to 3.4.2Oskari Rauta2021-11-24
| | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: update to 3.4.1Oskari Rauta2021-11-05
| | | | | | | | | | | | A lot of changes since 3.3.1. Full (long) lists of release notes between versions are available at https://github.com/containers/podman/releases containers.conf updated Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* treewide: fix broken conffilesHuangbin Zhan2021-10-27
| | | | Signed-off-by: Huangbin Zhan <zhanhb88@gmail.com>
* podman: update to 3.3.1W. Michael Petullo2021-09-14
| | | | | | | | | | | | | | | Earlier versions of podman did not make use of TMPDIR when running "podman run ...". Podman's default, /var/tmp, presents a problem to rootless use since OpenWrt's /var/tmp does not permit writes by non-root users. Podman 3.3.1 makes full use of TMPDIR. This is part of an attempt to get rootless podman to work on OpenWrt. See https://github.com/openwrt/packages/issues/15096. See also the upstream issue at https://github.com/containers/podman/issues/10698. Signed-off-by: W. Michael Petullo <mike@flyn.org>
* podman: change permissions on /usr/share/containers/seccomp.jsonW. Michael Petullo2021-06-16
| | | | | | | | Running podman as users other than root seems to require that those users can read /usr/share/containers/seccomp.json. This change sets the permissions on that file to match those used on Fedora. Signed-off-by: W. Michael Petullo <mike@flyn.org>
* podman: update to 3.2.0Oskari Rauta2021-06-08
| | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: change permissions on /etc/containersW. Michael Petullo2021-05-22
| | | | | | | | | Running podman as users other than root seems to require that those users can read the configuration files in /etc/containers. This change sets the permissions of /etc/containers and its contents to match those used on Fedora. Signed-off-by: W. Michael Petullo <mike@flyn.org>
* podman: bumb version to 3.1.2Oskari Rauta2021-05-18
| | | | Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: update to 3.1.1Oskari Rauta2021-04-21
| | | | | | | | | | - Add support for AppArmor - Gracefully stop containers and pods on shutdown I found out that If you change location of containers to persistent storage instead of tmpfs, starting them will fail unless they have been stopped. If this is the case that reboot has occurred before pods and containers have been stopped, they cannot be started, they have to be removed and re-created. Change in initscript tries to avoid that. Even if containers are running at tmpfs, this won't hurt. Still, if something happens and system hangs/reboots/etc, script won't save you from that. It's just a attempt to make things better. I also enabled AppArmor support for future possibilities. Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: Add selinux variant and several improvementsOskari Rauta2021-03-31
| | | | | | | | | * add -selinux variant which depends on libselinux * init script for background service * updated configurations * maintainer change as requested Signed-off-by: Oskari Rauta <oskari.rauta@gmail.com>
* podman: add 'crun' to containers.confDaniel Golle2021-03-30
| | | | | | Now that 'crun' has been packaged, add support for it in podman. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* podman: update to version 3.0.1Daniel Golle2021-03-27
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* podman: fix build on MIPSDaniel Golle2021-01-15
| | | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org> Signed-off-by: Rosen Penev <rosenp@gmail.com>
* podman: update to version 2.2.1Daniel Golle2020-12-15
| | | | Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* podman: improve packagingDaniel Golle2020-11-22
| | | | | | | * keep /etc/containers accross sysupgrade * make 'runc' the default run-time for now Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* podman: ship storage.conf and use runc by default for nowDaniel Golle2020-11-19
| | | | | | | Ship podman with defaults more coherent with user expectations and more likely to work out-of-the-box. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* podman: set PKG_USE_MIPS16:=0Daniel Golle2020-11-11
| | | | | | | podman fails to compile due to MIPS16 instructions somehow. Disable use of MIPS16. Signed-off-by: Daniel Golle <daniel@makrotopia.org>
* podman: add new packageDaniel Golle2020-11-07
Signed-off-by: Daniel Golle <daniel@makrotopia.org>
Powered by cgit, Themed by Ted Yin.