diff --git a/_service b/_service index 2d912f9..6b6bfa0 100644 --- a/_service +++ b/_service @@ -4,8 +4,8 @@ https://github.com/containers/libpod.git git podman -1.8.0 -v1.8.0 +1.8.1 +v1.8.1 diff --git a/podman-1.8.0.tar.xz b/podman-1.8.0.tar.xz deleted file mode 100644 index 35f9b9f..0000000 --- a/podman-1.8.0.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:05d892bc94cb3f0c4c7df475639cbbc339bf75520984ad6bd5b1a2f6b0aa03d1 -size 4906332 diff --git a/podman-1.8.1.tar.xz b/podman-1.8.1.tar.xz new file mode 100644 index 0000000..25a4253 --- /dev/null +++ b/podman-1.8.1.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:df658f581ab9c37ec8540a78e239fdbff2c058682dfef7612f49acbee60b5cc7 +size 4969936 diff --git a/podman.changes b/podman.changes index cf617f6..8cb2ea9 100644 --- a/podman.changes +++ b/podman.changes @@ -1,3 +1,144 @@ +------------------------------------------------------------------- +Thu Mar 12 07:36:52 UTC 2020 - Sascha Grunert + +- Update podman to v1.8.1: + * Features + - Many networking-related flags have been added to podman pod + create to enable customization of pod networks, including + --add-host, --dns, --dns-opt, --dns-search, --ip, + --mac-address, --network, and --no-hosts + - The podman ps --format=json command now includes the ID of + the image containers were created with + - The podman run and podman create commands now feature an + --rmi flag to remove the image the container was using after + it exits (if no other containers are using said image) + ([#4628](https://github.com/containers/libpod/issues/4628)) + - The podman create and podman run commands now support the + --device-cgroup-rule flag (#4876) + - While the HTTP API remains in alpha, many fixes and additions + have landed. These are documented in a separate subsection + below + - The podman create and podman run commands now feature a + --no-healthcheck flag to disable healthchecks for a container + (#5299) + - Containers now recognize the io.containers.capabilities + label, which specifies a list of capabilities required by the + image to run. These capabilities will be used as long as they + are more restrictive than the default capabilities used + - YAML produced by the podman generate kube command now + includes SELinux configuration passed into the container via + --security-opt label=... (#4950) + * Bugfixes + - Fixed CVE-2020-1726, a security issue where volumes manually + populated before first being mounted into a container could + have those contents overwritten on first being mounted into a + container + - Fixed a bug where Podman containers with user namespaces in + CNI networks with the DNS plugin enabled would not have the + DNS plugin's nameserver added to their resolv.conf + ([#5256](https://github.com/containers/libpod/issues/5256)) + - Fixed a bug where trailing / characters in image volume + definitions could cause them to not be overridden by a + user-specified mount at the same location + ([#5219](https://github.com/containers/libpod/issues/5219)) + - Fixed a bug where the label option in libpod.conf, used to + disable SELinux by default, was not being respected (#5087) + - Fixed a bug where the podman login and podman logout commands + required the registry to log into be specified (#5146) + - Fixed a bug where detached rootless Podman containers could + not forward ports (#5167) + - Fixed a bug where rootless Podman could fail to run if the + pause process had died + - Fixed a bug where Podman ignored labels that were specified + with only a key and no value (#3854) + - Fixed a bug where Podman would fail to create named volumes + when the backing filesystem did not support SELinux labelling + (#5200) + - Fixed a bug where --detach-keys="" would not disable + detaching from a container (#5166) + - Fixed a bug where the podman ps command was too aggressive + when filtering containers and would force --all on in too + many situations + - Fixed a bug where the podman play kube command was ignoring + image configuration, including volumes, working directory, + labels, and stop signal (#5174) + - Fixed a bug where the Created and CreatedTime fields in + podman images --format=json were misnamed, which also broke + Go template output for those fields + ([#5110](https://github.com/containers/libpod/issues/5110)) + - Fixed a bug where rootless Podman containers with ports + forwarded could hang when started (#5182) + - Fixed a bug where podman pull could fail to parse registry + names including port numbers + - Fixed a bug where Podman would incorrectly attempt to + validate image OS and architecture when starting containers + - Fixed a bug where Bash completion for podman build -f would + not list available files that could be built (#3878) + - Fixed a bug where podman commit --change would perform + incorrect validation, resulting in valid changes being + rejected (#5148) + - Fixed a bug where podman logs --tail could take large amounts + of memory when the log file for a container was large (#5131) + - Fixed a bug where Podman would sometimes incorrectly generate + firewall rules on systems using firewalld + - Fixed a bug where the podman inspect command would not + display network information for containers properly if a + container joined multiple CNI networks + ([#4907](https://github.com/containers/libpod/issues/4907)) + - Fixed a bug where the --uts flag to podman create and podman + run would only allow specifying containers by full ID (#5289) + - Fixed a bug where rootless Podman could segfault when passed + a large number of file descriptors + - Fixed a bug where the podman port command was incorrectly + interpreting additional arguments as container names, instead + of port numbers + - Fixed a bug where units created by podman generate systemd + did not depend on network targets, and so could start before + the system network was ready (#4130) + - Fixed a bug where exec sessions in containers which did not + specify a user would not inherit supplemental groups added to + the container via --group-add + - Fixed a bug where Podman would not respect the $TMPDIR + environment variable for placing large temporary files during + some operations (e.g. podman pull) + ([#5411](https://github.com/containers/libpod/issues/5411)) + * HTTP API + - Initial support for secure connections to servers via SSH + tunneling has been added + - Initial support for the libpod create and logs endpoints for + containers has been added + - Added a /swagger/ endpoint to serve API documentation + - The json endpoint for containers has received many fixes + - Filtering images and containers has been greatly improved, + with many bugs fixed and documentation improved + - Image creation endpoints (commit, pull, etc) have seen many + fixes + - Server timeout has been fixed so that long operations will no + longer trigger the timeout and shut the server down + - The stats endpoint for containers has seen major fixes and + now provides accurate output + - Handling the HTTP 304 status code has been fixed for all + endpoints + - Many fixes have been made to API documentation to ensure it + matches the code + * Misc + - Updated vendored Buildah to v1.14.2 + - Updated vendored containers/storage to v1.16.2 + - The Created field to podman images --format=json has been + renamed to CreatedSince as part of the fix for (#5110). Go + templates using the old name shou ld still work + - The CreatedTime field to podman images --format=json has been + renamed to CreatedAt as part of the fix for (#5110). Go + templates using the old name should still work + - The before filter to podman images has been renamed to since + for Docker compatibility. Using before will still work, but + documentation has been changed to use the new since filter + - Using the --password flag to podman login now warns that + passwords are being passed in plaintext + - Some common cases where Podman would deadlock have been fixed + to warn the user that podman system renumber must be run to + resolve the deadlock + ------------------------------------------------------------------- Thu Mar 5 16:26:16 UTC 2020 - Ralf Haferkamp @@ -7,7 +148,7 @@ Thu Mar 5 16:26:16 UTC 2020 - Ralf Haferkamp ------------------------------------------------------------------- Thu Mar 5 15:40:12 UTC 2020 - Richard Brown -- Configure br_netfilter for podman automatically (boo#1165738) +- Configure br_netfilter for podman automatically (boo#1165738) ------------------------------------------------------------------- Thu Feb 20 15:57:54 UTC 2020 - Ralf Haferkamp @@ -15,7 +156,7 @@ Thu Feb 20 15:57:54 UTC 2020 - Ralf Haferkamp - The name of the cni-bridge in the default config changed from "cni0" to "podman-cni0" with podman-1.6.0. Add a %trigger to rename the bridge in the system to the new default if it exists. - The trigger is only excuted when updating podman-cni-config + The trigger is only excuted when updating podman-cni-config from something older than 1.6.0. This is mainly needed for SLE where we're updating from 1.4.4 to 1.8.0 (bsc#1160460). @@ -60,7 +201,7 @@ Fri Feb 7 14:18:16 UTC 2020 - Sascha Grunert container could be paused while copying - Fixed a bug where the podman container prune --force command could possible remove running containers if they were started - while the command was running + while the command was running - Fixed a bug where Podman, when run as root, would not properly configure slirp4netns networking when requested - Fixed a bug where podman run --userns=keep-id did not work diff --git a/podman.spec b/podman.spec index 1f40ee3..072f257 100644 --- a/podman.spec +++ b/podman.spec @@ -22,7 +22,7 @@ %define with_libostree 1 %endif Name: podman -Version: 1.8.0 +Version: 1.8.1 Release: 0 Summary: Daemon-less container engine for managing containers, pods and images License: Apache-2.0