| Age | Commit message (Collapse) | Author |
|
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Closes: https://github.com/gentoo/gentoo/pull/42919
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Closes: https://bugs.gentoo.org/954123
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/41682
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Signed-off-by: Emanuel Valasiadis <emanuel@valasiadis.space>
Closes: https://github.com/gentoo/gentoo/pull/41672
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Signed-off-by: Emanuel Valasiadis <emanuel@valasiadis.space>
From: https://github.com/gentoo/gentoo/pull/41672
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/41170
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
This was weird solution, with nothing to gain from inline patch in the
ebuild. No variable substitution, no conditional, nothing. It was even
the same file across versions.
Signed-off-by: Arthur Zamarin <arthurzam@gentoo.org>
|
|
The Makefile relabels the podman executable during installation and
defaults to using container_runtime_exec_t which does not exist in
Gentoo's SELinux policies. Disable the automatic relabeling during
install and let portage take care of it to avoid this error.
Closes: https://bugs.gentoo.org/927966
Signed-off-by: Kenton Groombridge <concord@gentoo.org>
From: https://github.com/gentoo/gentoo/pull/39098
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Signed-off-by: WANG Xuerui <xen0n@gentoo.org>
|
|
* add compatibility to python 3.13
* Use new upstream variable in Makefile to toggle seccomp USE
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/37135
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Need to tell cgo to use proper pkg-config with the PKG_CONFIG
environment variable.
Bug: https://bugs.gentoo.org/930982
Signed-off-by: Krzesimir Nowak <knowak@microsoft.com>
Closes: https://github.com/gentoo/gentoo/pull/36805
Closes: https://bugs.gentoo.org/930982
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
1) Podman 5 drops old, slow & insecure stack in favour of shiny new one:
* slirp4netns -> passt/pasta
* runc -> crun
* cni-plugins -> netavark + aardvark-dns
* cgroupv1 -> cgroupv2
2) remove USE flags: cgroup-hybrid, init, rootless, fuse because ...
* cgroupv1 support is deprecated.
* app-containers/catatonit, net-misc/passt, sys-fs/fuse-overlayfs are very minimal
dependencies, <1M of installed size in <30s of compile time (ofc it
varies).
* These flags didn't do much except pulling in dependencies. So suppose
someone goes from -init to +init they've to compile whole podman again,
instead of just emerging catatonit.
* Forcing fuse-overlayfs on users makes sure to have a default graph driver in
rootless mode. containers-storage(5)
3) add python-any-r1.elcass to fix python-exec[-native-symlinks]
Closes: https://bugs.gentoo.org/877719
Closes: https://bugs.gentoo.org/906073
Bug: https://bugs.gentoo.org/show_bug.cgi?id=927501
Bug: https://bugs.gentoo.org/show_bug.cgi?id=927500
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Signed-off-by: Sam James <sam@gentoo.org>
|
|
podman-cleanup-transient:
This service runs once each boot to remove potential leftover
container state from previous boots.
This is needed when using transient storage mode in podman where the
database and other configs are stored in tmpfs, but some other files
are not. If we don't run this after an unclean boot then there may
be some leftover files that grow over time.
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
From: https://github.com/gentoo/gentoo/pull/35766
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
1. rewrite podman.initd
2. Add cron job which executes daily mimicking podman-auto-update.{service,timer} along
with USE flag `cron`
3. Add podman-restart.initd which starts and stops all containers with
restart-policy set to always
Closes: https://github.com/gentoo/gentoo/pull/33621
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Bug: https://bugs.gentoo.org/906073
Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
|
|
See: https://github.com/gentoo/gentoo/pull/35240#pullrequestreview-1873395014
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Upstream changelog:
Features:
* The podman farm suite of commands for multi-architecture builds is now fully enabled and documented.
* Add a network recovery service to Podman Machine VMs using the QEMU backend to detect and recover from an inoperable host networking issues experienced by Mac users when running for long periods of time.
Bugfixes:
* Fixed a bug where the HyperV provider for podman machine did not forward the API socket to the host machine.
* Fixed a bug where improperly formatted annotations passed to podman kube play could cause Podman to panic.
* Fixed a bug where podman system reset could fail if non-Podman containers (e.g. containers created by Buildah) were present.
Misc:
* Containers run in podman machine VMs now default to a PID limit of unlimited, instead of 2048.
Signed-off-by: Rahil Bhimjiani <me@rahil.rocks>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
1. Adding support for _rc versions
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Closes: https://github.com/gentoo/gentoo/pull/33921
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
4.7.2 fixes security issue
https://github.com/moby/moby/security/advisories/GHSA-jq35-85cj-fj4p
Just to be safe removing 4.7.0 and 4.7.1 as well.
For non-live versions, prevent git operations which causes sandbox violations
https://github.com/gentoo/gentoo/pull/33531#issuecomment-1786107493
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Closes: https://github.com/gentoo/gentoo/pull/33607
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Cleanup SELinux tag related file as it is always
enabled (https://github.com/containers/podman/commit/229734c10a3d07d18137f1e46ccdb02331c13fd2)
Closes: https://github.com/gentoo/gentoo/pull/33196
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|
|
Major rewrite based on upstream's instructions. Introducing 3 more USE
flags - systemd, seccomp, wrapper (provides docker command)
Closes: https://github.com/gentoo/gentoo/pull/33070
Closes: https://bugs.gentoo.org/911537
Signed-off-by: Rahil Bhimjiani <rahil3108@gmail.com>
Signed-off-by: Zac Medico <zmedico@gentoo.org>
|