20289c0cf3
bump github.com/theupdateframework/go-tuf
...
Bump github.com/theupdateframework/go-tuf, which is an indirect
dependency, to get the fix for GHSA-3633-5h82-39pq, though it doesn't
appear to affect any of the packages we use.
[NO NEW TESTS NEEDED]
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-09-20 16:02:31 -04:00
84da1a55fe
Bump dependencies
...
Bump to the current versions of containers/storage, containers/image,
containers/common, and dependencies that they pull in.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-08-01 17:18:49 -04:00
ee9c9b985e
Bump github.com/containers/storage from v1.40.2 to v1.40.3
...
Update github.com/containers/storage from v1.40.2 to v1.40.3.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-07-01 10:11:25 -04:00
56697ca060
build(deps): bump github.com/containerd/containerd from 1.6.3 to 1.6.4
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.6.3 to 1.6.4.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.6.3...v1.6.4 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-05-04 08:13:22 +00:00
28a002e919
Vendor in containers/storage v1.40.2
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-05-03 19:11:29 -04:00
d6fd289adb
Merge pull request #3899 from flouthoc/set-correct-targetplatform
...
build: automatically set correct `$TARGETPLATFORM` where expected.
2022-05-03 11:10:11 -04:00
d3cbd41fcb
vendor: bump imagebuilder to master/009dbc6
...
Use imagebuilder which sets correct behaviour for default builtinargs
while processing inline `FROM --platform=` after openshift/imagebuilder#224
Signed-off-by: Aditya R <arajan@redhat.com>
2022-05-03 15:53:01 +05:30
3ac71c8c92
build(deps): bump github.com/fsouza/go-dockerclient
...
Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient ) from 1.7.10 to 1.7.11.
- [Release notes](https://github.com/fsouza/go-dockerclient/releases )
- [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go )
- [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.7.10...v1.7.11 )
---
updated-dependencies:
- dependency-name: github.com/fsouza/go-dockerclient
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-05-03 09:36:29 +00:00
b2b70007fa
Vendor in containers/(common, storage, image)
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-05-02 17:10:01 -04:00
8074610247
build(deps): bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
...
Bumps [github.com/containernetworking/cni](https://github.com/containernetworking/cni ) from 1.0.1 to 1.1.0.
- [Release notes](https://github.com/containernetworking/cni/releases )
- [Commits](https://github.com/containernetworking/cni/compare/v1.0.1...v1.1.0 )
---
updated-dependencies:
- dependency-name: github.com/containernetworking/cni
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-04-28 08:14:05 +00:00
85df07c2a0
build(deps): bump github.com/containerd/containerd from 1.6.2 to 1.6.3
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.6.2 to 1.6.3.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.6.2...v1.6.3 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-04-26 08:13:02 +00:00
9a3250308b
Update vendor of containers/(common,storage,image)
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-04-22 06:46:20 -04:00
5de32ade7c
use etchosts package from c/common
...
Use the new etchosts package to generate the hosts file.
This will ensure that we use the same logic in podman and buildah.
New features are:
- no duplicated entries
- adds entries for the network/slirp4netns ips
- configure the host.containers.internal entry in containers.conf
- configure the base hosts file in containers.conf
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-04-21 18:05:30 +02:00
faee129628
update c/common to latest main
...
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2022-04-21 12:42:13 +02:00
eb5b6ee808
Update vendor of containers/(common,storage,image)
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-04-20 16:21:48 -04:00
d41a4fd27c
Merge pull request #3908 from rhatdan/VENDOR
...
Update vendor of storage,common,image
2022-04-12 16:37:38 -04:00
6e36119844
Update vendor of storage,common,image
...
Preparing for release update vendoring.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-04-12 13:40:34 -04:00
84580a69bc
Bump golang.org/x/crypto to 7b82a4e
...
Resolves: GHSA-8c26-wmh5-6g9v - CVE-2022-27191
Buildah doesn't seem to be directly affected as the logic in question
is not called.
golang.org/x/crypto@1baeb1ce contains the actual CVE fix. Using the
latest upstream commit to also include support for SHA-2.
Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2022-04-12 10:12:21 -04:00
7ede3f92ce
Merge pull request #3836 from Luap99/netns-default
...
buildah: actually use containers.conf settings
2022-04-08 10:12:20 -04:00
8e299da770
oci spec: change special mount points for namespaces
...
The current logic in setupRootlessSpecChanges has quite a few problems.
First of this logic is a noop for rootful and when we have a netns.
However pid and ipc could still need special mounts.
In Podman we have already working code for this so this reuses the same
logic and adapts it to buildah.
4ba71f955a/pkg/specgen/generate/oci.go (L178)
2022-04-08 10:50:01 +02:00
b4c49261f0
integration tests: learn to start a dummy registry
...
When a test needs to talk to a registry server, launch one as part of
the test rather than depending on it having been started by someone
else.
Use run_buildah where we used to use 'run buildah' without checking the
return code, and in a few cases where we did check it.
In the "from with non buildah container" test, use "podman create" with
host networking, in an attempt to avoid messing with networking in cases
where we're running on a system with a version of podman that will
create a bridge with CNI that we'll also create with netavark. We're
not sharing storage between the two invocations, so the logic that tries
to detect this problem won't detect it.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-04-07 16:16:18 -04:00
e792564b4a
vendor in latest containers/common,image,storage
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-04-05 10:04:35 -04:00
9e0dd9a0b6
Merge pull request #3875 from rhatdan/selinux
...
Vendor in opencontainers/selinux v1.10.1
2022-04-04 13:31:29 -04:00
0d53dcff38
Vendor in latest opencontainers/selinux v1.10.1
...
[NO NEW TESTS NEEDED]
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-04-04 10:08:44 -04:00
e13465f61b
build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Changelog](https://github.com/opencontainers/runc/blob/v1.1.1/CHANGELOG.md )
- [Commits](https://github.com/opencontainers/runc/compare/v1.1.0...v1.1.1 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-30 15:55:44 +00:00
d629066b30
vendor: update github.com/openshift/imagebuilder
...
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2022-03-30 14:51:10 +02:00
c003a34cb2
build(deps): bump github.com/onsi/gomega from 1.18.1 to 1.19.0
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.18.1 to 1.19.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.18.1...v1.19.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-28 08:17:41 +00:00
03d518d2df
build(deps): bump github.com/containers/common from 0.47.4 to 0.47.5
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.47.4 to 0.47.5.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.47.4...v0.47.5 )
---
updated-dependencies:
- dependency-name: github.com/containers/common
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-25 09:16:30 +00:00
1890491539
Bump c/storage to v1.39.0 in main
...
As the title says. This is in preparation for the Fedora release.
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2022-03-24 20:40:48 -04:00
59551bb20a
build(deps): bump github.com/docker/docker
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 20.10.13+incompatible to 20.10.14+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Changelog](https://github.com/moby/moby/blob/master/CHANGELOG.md )
- [Commits](https://github.com/docker/docker/compare/v20.10.13...v20.10.14 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-24 17:20:52 +00:00
c87de090ad
Merge pull request #3848 from lsm5/main-cve-2022-21698
...
Bump github.com/prometheus/client_golang to v1.11.1
2022-03-24 18:19:43 +01:00
ecd192698c
Bump github.com/prometheus/client_golang to v1.11.1
...
Resolves: CVE-2022-21698
Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2022-03-24 11:20:38 -04:00
b94a005453
build(deps): bump github.com/containerd/containerd from 1.6.1 to 1.6.2
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.6.1 to 1.6.2.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.6.1...v1.6.2 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-24 09:13:12 +00:00
6ef3c7593b
build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3
...
Bumps [github.com/containers/ocicrypt](https://github.com/containers/ocicrypt ) from 1.1.2 to 1.1.3.
- [Release notes](https://github.com/containers/ocicrypt/releases )
- [Commits](https://github.com/containers/ocicrypt/compare/v1.1.2...v1.1.3 )
---
updated-dependencies:
- dependency-name: github.com/containers/ocicrypt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-21 09:11:09 +00:00
6e84cc7bb1
build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1
...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify ) from 1.7.0 to 1.7.1.
- [Release notes](https://github.com/stretchr/testify/releases )
- [Commits](https://github.com/stretchr/testify/compare/v1.7.0...v1.7.1 )
---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-16 09:19:41 +00:00
360add7d95
Merge pull request #3817 from containers/dependabot/go_modules/github.com/docker/docker-20.10.13incompatible
...
build(deps): bump github.com/docker/docker from 20.10.12+incompatible to 20.10.13+incompatible
2022-03-11 04:59:58 -05:00
e0fe752187
build(deps): bump github.com/spf13/cobra from 1.3.0 to 1.4.0
...
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra ) from 1.3.0 to 1.4.0.
- [Release notes](https://github.com/spf13/cobra/releases )
- [Changelog](https://github.com/spf13/cobra/blob/master/CHANGELOG.md )
- [Commits](https://github.com/spf13/cobra/compare/v1.3.0...v1.4.0 )
---
updated-dependencies:
- dependency-name: github.com/spf13/cobra
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-11 09:11:36 +00:00
072f447b68
build(deps): bump github.com/docker/docker
...
Bumps [github.com/docker/docker](https://github.com/docker/docker ) from 20.10.12+incompatible to 20.10.13+incompatible.
- [Release notes](https://github.com/docker/docker/releases )
- [Changelog](https://github.com/moby/moby/blob/master/CHANGELOG.md )
- [Commits](https://github.com/docker/docker/compare/v20.10.12...v20.10.13 )
---
updated-dependencies:
- dependency-name: github.com/docker/docker
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-11 09:11:29 +00:00
4aa1a96e7b
build(deps): bump github.com/docker/distribution
...
Bumps [github.com/docker/distribution](https://github.com/docker/distribution ) from 2.8.0+incompatible to 2.8.1+incompatible.
- [Release notes](https://github.com/docker/distribution/releases )
- [Commits](https://github.com/docker/distribution/compare/v2.8.0...v2.8.1 )
---
updated-dependencies:
- dependency-name: github.com/docker/distribution
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-09 09:13:42 +00:00
e32d525363
Merge pull request #3804 from flouthoc/buildah-rootless-cirrus
...
buildah: test rootless integration
2022-03-08 11:44:10 -05:00
e92e71e826
vendor: bump c/storage to main/93ce26691863
...
Signed-off-by: Aditya R <arajan@redhat.com>
2022-03-08 14:57:11 +05:30
72f667db14
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.9 to 1.7.10
...
Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient ) from 1.7.9 to 1.7.10.
- [Release notes](https://github.com/fsouza/go-dockerclient/releases )
- [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go )
- [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.7.9...v1.7.10 )
---
updated-dependencies:
- dependency-name: github.com/fsouza/go-dockerclient
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-08 09:14:08 +00:00
94335482f2
build(deps): bump github.com/containerd/containerd from 1.6.0 to 1.6.1
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.6.0 to 1.6.1.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.6.0...v1.6.1 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-03-03 09:17:11 +00:00
d9b3a185ca
use c/image/pkg/blobcache
...
Buildah's pkg/blobcache has been moved into containers/image [1] to
consolidate implementations of interfaces such as image destinations
and image sources.
Since there are no functional changes: [NO NEW TESTS NEEDED]
[1] https://github.com/containers/image/pull/1459
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2022-03-02 09:55:16 +01:00
71dfb9035f
vendor c/image/v5@v5.20.0
...
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2022-03-02 09:13:03 +01:00
c97d03fd0f
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.8 to 1.7.9
...
Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient ) from 1.7.8 to 1.7.9.
- [Release notes](https://github.com/fsouza/go-dockerclient/releases )
- [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go )
- [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.7.8...v1.7.9 )
---
updated-dependencies:
- dependency-name: github.com/fsouza/go-dockerclient
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-02-22 09:13:05 +00:00
1c2b521a54
build(deps): bump github.com/containerd/containerd from 1.5.9 to 1.6.0
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.5.9 to 1.6.0.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.5.9...v1.6.0 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-02-16 09:10:18 +00:00
fde506e3fd
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.7 to 1.7.8
...
Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient ) from 1.7.7 to 1.7.8.
- [Release notes](https://github.com/fsouza/go-dockerclient/releases )
- [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go )
- [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.7.7...v1.7.8 )
---
updated-dependencies:
- dependency-name: github.com/fsouza/go-dockerclient
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-02-11 10:09:54 +00:00
0423032e9a
Bump c/common to v0.47.4
...
As the title says.
Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2022-02-09 15:12:10 -05:00
c540ceca36
Update vendor of openshift/imagebuilder
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2022-02-02 15:06:00 -05:00
Nalin Dahyabhai
dependabot[bot]
Daniel J Walsh
OpenShift Merge Robot
Aditya R
Paul Holzinger
Lokesh Mandvekar
Giuseppe Scrivano
tomsweeneyredhat
Valentin Rothberg