This patch will allow commands like
buildah run $ctr ls -lZ /
To work correctly.
Need to update vendor of urfave cli.
Also changed all commands to no longer accept global options after the COMMAND.
Single boolean options can now be passed together.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Closes: #493
Approved by: rhatdan
Fixes the naming issue of blobs and config for the dir transport
by removing the .tar extension
Signed-off-by: umohnani8 <umohnani@redhat.com>
Closes: #489
Approved by: rhatdan
This fixes a large SELinux bug. Currently if you do the following
commands
ctr=$(buildah from scratch)
mnt=$(buildah mount $ctr)
dnf install --installroot=$mnt httpd
buildah run $ctr touch /test
The last command fails. The reason for this is the SELinux labels are getting applied
to the mount point, since it was not being mounted as an overlay file system.
Containers/storage was updated to always mount an overlay even if the lower layer is empty
This then causes the mount point to use a context mount, and changes dnf to not apply
labels. This change then allows buildah run to create confined containers to run code.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Closes: #486
Approved by: TomSweeneyRedHat
vendor in profiles from github.com/docker/docker/profiles to support seccomp.
vendor in latest runtime-tools to support bind mounting.
Signed-off-by: umohnani8 <umohnani@redhat.com>
Closes: #477
Approved by: rhatdan
A patch got merged into containers/storage that makes sure SELinux labels
are appliced when committing to storage. This prevents a failure condition
which arrises from leaked mount points between the time a container is mounted
and it is committed.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Closes: #453
Approved by: TomSweeneyRedHat
I have made a subpackage of libpod to handle chrootuser,
using the user code from buildah.
This patch removes user handling from buildah and uses
projectatomic/libpod/pkg/chrootuser
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
Closes: #377
Approved by: nalind
When locating an image for pulling, inspection, or pushing, if we're
given an image name that doesn't include a domain/registry, try building
a set of candidate names using the configured registries as domains, and
then pull/inspect/push using the first of those names that works.
If a name that we're given corresponds to a prefix of the ID of a local
image, skip completion and use the ID directly instead.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #360
Approved by: rhatdan
Update containers/image and containers/storage to current master
(17449738f2bb4c6375c20dcdcfe2a6cccf03f312 and
0d32dfce498e06c132c60dac945081bf44c22464, respectively).
Also updates github.com/docker/docker, golang.org/x/sys, and
golang.org/x/text.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #187
Approved by: rhatdan
Adds support for converting manifest types when using the dir transport
Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
Closes: #321
Approved by: rhatdan
OCI 1.0 Image specification is now released so we want to bump
buildah version to support 1.0 images.
Bump to version 0.3
Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Closes: #203
Approved by: rhatdan
Update to just-released versions of image-spec and runtime-spec, and the
latest version of runtime-tools.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #201
Approved by: rhatdan
Bump containers/storage and containers/image, and pin them to their
current versions. This requires that we update image-spec to rc6 and
add github.com/ostreedev/ostree-go, which adds build-time requirements
on glib2-devel and ostree-devel.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #174
Approved by: rhatdan
container/storage now supports remote shares and having a configuration
file. We need to merge this to demonstrate using buildah with nfs shares.
Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Closes: #145
Approved by: nalind
container/storage now supports remote shares and having a configuration
file. We need to merge this to demonstrate using buildah with nfs shares.
Signed-off-by: Dan Walsh <dwalsh@redhat.com>
Closes: #140
Approved by: nalind
Re-vendor github.com/docker/docker and github.com/opencontainers/runc,
which we now use less of than we did previously.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #79
Approved by: nalind
Update the versions of github.com/opencontainers/runtime-spec and
github.com/opencontainers/runtime-tools that we vendor.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #79
Approved by: nalind
Update the version of github.com/fsouza/go-dockerclient that we vendor,
and pick up its new dependency on github.com/moby/moby.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #79
Approved by: nalind
Update and pin the version of github.com/docker/go-connections that we
vendor.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #79
Approved by: nalind
Update to the current github.com/containers/image and
github.com/opencontainers/image-spec packages.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #79
Approved by: nalind
Update to the current containers/storage and vendor its new dependency
on github.com/tchap/go-patricia.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #79
Approved by: nalind
Update our version of github.com/docker/docker. Now that we've got #75
merged, we end up pulling in quite a bit less of it.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #79
Approved by: nalind
Vendor openshift/imagebuilder and its dependencies, and pick up new
dependencies on golang.org/x/text and github.com/opencontainers/selinux.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Closes: #59
Approved by: rhatdan
Fix builds against go 1.5. This should be temporary, since code we
vendor which depends on engine-api should be moving to something else.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
Drop back to a slightly older version of the runtime spec.
Vendor github.com/docker/docker to get type definitions.
Switch to the containers version of storage.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
The github.com/gorilla/mux package requires github.com/gorilla/context,
so we need to vendor it, too.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
