Nalin Dahyabhai
76527fcfc9
Bump github.com/prometheus/client_golang to v1.11.1
...
Resolves: CVE-2022-21698
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-03-24 17:22:33 -04:00
Lokesh Mandvekar
d6b3164063
Bump containerd to v1.5.7
...
Fixes: GHSA-c2h3-6mxw-7mvq
Vulnerable versions: >= 1.5.0, < 1.5.7
Patched version: 1.5.7
`Impact`
A bug was found in containerd where container root directories and
some plugins had insufficiently restricted permissions, allowing
otherwise unprivileged Linux users to traverse directory contents
and execute programs. When containers included executable programs
with extended permission bits (such as setuid), unprivileged Linux
users could discover and execute those programs. When the UID of
an unprivileged Linux user on the host collided with the file
owner or group inside a container, the unprivileged Linux user on
the host could discover, read, and modify those files.
`Patches`
This vulnerability has been fixed in containerd 1.4.11 and
containerd 1.5.7. Users should update to these version when they
are released and may restart containers or update directory
permissions to mitigate the vulnerability.
`Workarounds`
Limit access to the host to trusted users. Update directory
permission on container bundles directories.
Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2022-01-24 15:57:44 -05:00
TomSweeneyRedHat
679ba8fb92
[release-1.22] bump c/image to v5.15.2
...
Bump c/image to v5.15.2 in readiness for Podman v3.3 version dance.
[NO TESTS NEEDED]
[NO NEW TESTS NEEDED]
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2021-08-19 09:33:03 -04:00
TomSweeneyRedHat
97bbf40d74
[release-1.22] Bump c/storage to v1.34.1
...
Bump c/storage to v1.34.1 for the release-1.22 branch
Also bump go to 1.16 in Makefile and .cirrus.yml
[NO TESTS NEEDED]
[NO NEW TESTS NEEDED]
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2021-08-16 18:01:32 -04:00
TomSweeneyRedHat
a80feebe87
c/image, c/storage, c/common vendor before Podman 3.3 release
...
In preparation for Podman v3.3.0, start the vendor dance
c/common - v0.42.0
c/image - v5.15.0
c/storage - v1.33.0
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-08-02 16:09:24 +02:00
dependabot[bot]
914a7e5299
build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.13.2 to 5.14.0.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.13.2...v5.14.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-07-27 13:22:21 -04:00
dependabot[bot]
b935dbf50d
build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.32.6 to 1.33.0.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.32.6...v1.33.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/storage
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-07-27 08:29:27 +00:00
Valentin Rothberg
a23615aecf
refine dangling filter
...
By proxy by vendoring containers/common. Previously, a "dangling" image
was an untagged image; just a described in the Docker docs. The
definition of dangling has now been refined to an untagged image without
children to be compatible with Docker.
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-07-21 14:04:36 +02:00
dependabot[bot]
12c8c4cc38
build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.0...v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-07-19 08:23:43 +00:00
Daniel J Walsh
b5c130e7db
Reuse code from containers/common/pkg/parse
...
At some point code from buildah/pkg/parse we copied into
containers/common/pkg/parse. Buildah should use the new code
now, so that we only have to make changes in one place.
[NO TESTS NEEDED] Since there is no new code added.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-07-12 14:58:58 -04:00
Daniel J Walsh
36e17cbb9b
Fix excludes exception begining with / or ./
...
Vendor in containers/storage v1.32.6 for the fix
Fixes: https://github.com/containers/buildah/issues/3272
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-07-09 13:59:16 -04:00
dependabot[bot]
25c0d3d832
build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.13.0...v1.14.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-07-08 08:23:53 +00:00
Valentin Rothberg
fbd99d001d
vendor containers/common@main
...
The `IgnorePlatform` options has been removed from the
`LookupImageOptions` in libimage to properly support multi-arch images.
Buildah always set it to true.
Also temporarily remove /usr/share/containers/containers.conf. c/common
is now throwing warnings when facing unknown keys which unfortunately is
the case with the upstream containers.conf and ultimately breaks CI
since some output checks are failing.
Once an updated containers.conf has been shipped, we can revert the
change.
[NO TESTS NEEDED]
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-07-07 13:28:20 +02:00
dependabot[bot]
5603612843
build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
...
Bumps [github.com/containers/ocicrypt](https://github.com/containers/ocicrypt ) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/containers/ocicrypt/releases )
- [Commits](https://github.com/containers/ocicrypt/compare/v1.1.1...v1.1.2 )
---
updated-dependencies:
- dependency-name: github.com/containers/ocicrypt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-29 08:22:18 +00:00
dependabot[bot]
477e431817
build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.32.4 to 1.32.5.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.32.4...v1.32.5 )
---
updated-dependencies:
- dependency-name: github.com/containers/storage
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-25 08:27:24 +00:00
Matthew Heon
fdf344c651
Add support for default network creation
...
As part of the podman-machine work, we need to stop distributing
the default CNI configuration that has traditionally been
supplied by Podman, 87-podman.conflist. Buildah (as root) also
uses this file, and will be unable to set up container networking
without it.
The replacement we've introduced is the ability to automatically
create said configuration file using a package in
containers/common. This has already been added to Podman, and
this PR adds it to Buildah.
[NO TESTS NEEDED] as there's no real easy way to verify that
Buildah made the network - no explicit command for listing
networks.
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2021-06-23 14:32:52 -04:00
dependabot[bot]
dfc3875f35
build(deps): bump github.com/opencontainers/runc
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.0-rc95 to 1.0.0.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.0-rc95...v1.0.0 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
[NO TESTS NEEDED]
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-06-23 08:43:28 -04:00
dependabot[bot]
d9f7c7a02b
build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.32.2 to 1.32.3.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.32.2...v1.32.3 )
---
updated-dependencies:
- dependency-name: github.com/containers/storage
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-21 13:05:59 +00:00
dependabot[bot]
b0dd50766f
build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.40.0 to 0.40.1.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.40.0...v0.40.1 )
---
updated-dependencies:
- dependency-name: github.com/containers/common
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-21 08:29:14 +00:00
dependabot[bot]
3cf8145d76
build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.39.0...v0.40.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/common
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-06-17 16:29:49 -04:00
dependabot[bot]
fbfce827f2
build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.13.0 to 5.13.1.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.13.0...v5.13.1 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-17 08:24:33 +00:00
dependabot[bot]
9cced13a45
build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.12.0 to 5.13.0.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.12.0...v5.13.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-06-16 05:43:51 -04:00
OpenShift Merge Robot
e451a6f7ef
Merge pull request #3291 from containers/dependabot/go_modules/github.com/fsouza/go-dockerclient-1.7.3
...
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
2021-06-10 16:50:28 -04:00
OpenShift Merge Robot
99aa24bf1c
Merge pull request #3289 from containers/dependabot/go_modules/go.etcd.io/bbolt-1.3.6
...
build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
2021-06-10 16:49:16 -04:00
dependabot[bot]
f3e3d72a22
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
...
Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient ) from 1.7.2 to 1.7.3.
- [Release notes](https://github.com/fsouza/go-dockerclient/releases )
- [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go )
- [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.7.2...v1.7.3 )
---
updated-dependencies:
- dependency-name: github.com/fsouza/go-dockerclient
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 19:36:18 +00:00
dependabot[bot]
edf60ccb54
build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
...
Bumps [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt ) from 1.3.5 to 1.3.6.
- [Release notes](https://github.com/etcd-io/bbolt/releases )
- [Commits](https://github.com/etcd-io/bbolt/compare/v1.3.5...v1.3.6 )
---
updated-dependencies:
- dependency-name: go.etcd.io/bbolt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 19:35:21 +00:00
dependabot[bot]
422b891875
build(deps): bump github.com/containers/storage from 1.32.1 to 1.32.2
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.32.1 to 1.32.2.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.32.1...v1.32.2 )
---
updated-dependencies:
- dependency-name: github.com/containers/storage
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-09 19:34:56 +00:00
dependabot[bot]
6c039137e2
build(deps): bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4
...
Also fix the build.spec file to pass version tests.
Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo ) from 1.16.3 to 1.16.4.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v1.16.3...v1.16.4 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-06-09 06:21:06 -04:00
dependabot[bot]
c911a73ed2
build(deps): bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3
...
Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo ) from 1.16.2 to 1.16.3.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v1.16.2...v1.16.3 )
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-05-31 07:49:47 -04:00
dependabot[bot]
71db838d02
build(deps): bump github.com/containers/storage from 1.32.0 to 1.32.1
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.32.0 to 1.32.1.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.32.0...v1.32.1 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-28 08:26:02 +00:00
dependabot[bot]
2537cc5c57
build(deps): bump github.com/onsi/gomega from 1.12.0 to 1.13.0
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.12.0...v1.13.0 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-27 08:17:36 +00:00
dependabot[bot]
3b5db40ddd
Bump github.com/containers/common from 0.38.4 to 0.39.0
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.38.4 to 0.39.0.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.38.4...v0.39.0 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-26 08:49:22 +00:00
dependabot[bot]
8106ff81d2
Bump github.com/containers/storage from 1.31.1 to 1.31.2
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.31.1 to 1.31.2.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.31.1...v1.31.2 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-21 08:16:44 +00:00
dependabot[bot]
79bf5d5c42
Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.0-rc94 to 1.0.0-rc95.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.0-rc94...v1.0.0-rc95 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-20 08:15:42 +00:00
Daniel J Walsh
8dc8507360
Vendor in containers/common v0.38.4
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-05-19 10:54:12 -04:00
Valentin Rothberg
300a460055
update c/common
...
Update containers common to the latest HEAD. Some bug fixes in libimage
forced us to have a clearer separation between ordinary images and
manifest lists. Hence, when looking up manifest lists without recursing
into any of their instances, we need to use `LookupManifestList()`.
[NO NEW TESTS NEEDED]
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-05-18 14:53:43 -04:00
Daniel J Walsh
60ca4e6914
update vendor of containers/storage v1.31.1
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-05-18 09:48:41 -04:00
dependabot[bot]
400e553150
Bump github.com/containers/storage from 1.30.3 to 1.31.0
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.30.3 to 1.31.0.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.30.3...v1.31.0 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-18 08:15:41 +00:00
dependabot[bot]
0b44fe175b
Bump github.com/containers/storage from 1.30.1 to 1.30.3
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.30.1 to 1.30.3.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.30.1...v1.30.3 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-12 08:33:17 +00:00
dependabot[bot]
87036cea94
Bump github.com/opencontainers/runc from 1.0.0-rc93 to 1.0.0-rc94
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.0-rc93 to 1.0.0-rc94.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.0-rc93...v1.0.0-rc94 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-11 08:20:51 +00:00
dependabot[bot]
017817100e
Bump github.com/onsi/gomega from 1.11.0 to 1.12.0
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.11.0...v1.12.0 )
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-05-06 06:20:38 -04:00
OpenShift Merge Robot
1562cd20ba
Merge pull request #3204 from containers/dependabot/go_modules/github.com/containers/image/v5-5.12.0
...
Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
2021-05-05 11:15:11 -04:00
dependabot[bot]
de97d22d9a
Bump github.com/containers/image/v5 from 5.11.1 to 5.12.0
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.11.1 to 5.12.0.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.11.1...v5.12.0 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-05 09:06:00 +00:00
dependabot[bot]
ad16698216
Bump github.com/onsi/ginkgo from 1.16.1 to 1.16.2
...
Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo ) from 1.16.1 to 1.16.2.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v1.16.1...v1.16.2 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-05 09:05:26 +00:00
Valentin Rothberg
a23a49b227
update to latest libimage
...
Update Buildah to the latest libimage. Migrating Podman over to
libimage entailed a number of fixes and changes to libimage which
we need to account for in Buildah.
Most notably:
* `(*Runtime).LookupImage()` now returns `storage.ErrImageUnknown`
instead of `nil` in case no matching image is found.
* `(*Runtime).LookupImage()` now does quite a bit more work finding
a local image and will also look at the repotags (or digests) of
all local images if needed.
* The signature of `(*Runtime).RemoveImages()` was changed and now
returns a slice of reports and errors. The reports aggregate the
data of a removed image which allows the function to be used by
`podman image prune` which is also interested in the size of the
removed data. The slice of errors is also needed in Podman which
needs to have a closer look at _all_ rmi errors in order to determine
the appropriate exit code (Docker compat).
* `libimage/types` has been removed. Pull policies have been merged
into already existing logic in `pkg/config`.
Please refer to containers/podman/pull/10147 for a more detailed
changelog.
[NO NEW TESTS NEEDED]
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-05-04 08:45:07 +02:00
dependabot[bot]
a7f49f9f6b
Bump github.com/containers/common from 0.37.0 to 0.37.1
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.37.0 to 0.37.1.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.37.0...v0.37.1 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-02 18:09:31 +00:00
dependabot[bot]
3cec5d475c
Bump github.com/containers/storage from 1.30.0 to 1.30.1
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.30.0 to 1.30.1.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.30.0...v1.30.1 )
Signed-off-by: dependabot[bot] <support@github.com>
2021-05-02 10:07:27 +00:00
Ashley Cui
3f13622955
vendor in openshift/imagebuilder
...
Signed-off-by: Ashley Cui <acui@redhat.com>
2021-04-22 13:45:21 -04:00
Valentin Rothberg
dcd2a92e56
use new containers/common/libimage package
...
Move all code related handling container image over to the new
`libimage` package in containers/common. The new package is an
attempt to consolidate the code across the containers tools under the
github.com/containers umbrella.
The new `libimage` packages provides functionality to perform all kinds
of operations for managing images such as local lookups, pushing,
pulling, listing, removing, etc.
The following packages have been moved over the containers/common:
`manifests` -> `common/image/manifests`
`pkg/manifests` -> `common/pkg/manifests`
`pkg/supplemented` -> `common/pkg/supplemented`
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-04-22 17:39:00 +02:00
Daniel J Walsh
1fbf4a2f8a
build(deps): bump github.com/containers/image/v5 from 5.10.5 to 5.11.1
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.10.5 to 5.11.1.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.10.5...v5.11.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-04-20 13:52:45 -04:00