lordwelch/podman-static
1
0
Fork 0
Code Packages Releases 1 Activity
201 Commits 1 Branch 1 Tag
master
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Max GoltzscheandMax Goltzsche 3ce10a1cd2 feat: podman 5.8.0 + dependency updates
Release / push (push) Has been cancelled 
* conmon 2.2.1
* netavark 1.17.2
* passt 2026_01_20.386b5f5
* libfuse 3.18.1
* crun 1.26
 2026-02-14 12:14:18 +01:00
Max GoltzscheandMax Goltzsche 226ba1dd54 fix: bump podman 5.7.1 + dependencies 
* podman 5.7.1
* runc 1.4.0
* crun 1.25.1
* passt 2025_12_10.d04c480
 2025-12-11 02:17:58 +01:00
Max GoltzscheandMax Goltzsche 9ccf992536 fix: bump podman 5.5.2 + dependency updates 
* podman 5.5.2
* passt 2025_06_11.0293c6f
* alpine 3.22 base image
* Go-based binaries built using Go 1.24
* Rust-based binaries built using Rust 1.87
 2025-06-25 02:45:05 +02:00
Max GoltzscheandMax Goltzsche c5353da3b3 fix: bump podman 5.5.1 2025-06-06 01:14:34 +02:00
Max GoltzscheandMax Goltzsche bfc44aa70b feat: podman 5.5.0 
* podman 5.5.0
* crun 1.3.0
* netavark 1.15.0
* aardvark-dns 1.15.0
* passt 2025_05_12.8ec1341
* built using Go 1.23
 2025-05-14 23:57:14 +02:00
Max GoltzscheandMax Goltzsche 6adfc793ca bump podman 5.4.2 
* podman 5.4.2
* runc 1.2.6
* crun 1.21
* netavark 1.14.1
* passt 2025_03_20.32f6212
 2025-04-03 01:29:11 +02:00
Max GoltzscheandMax Goltzsche 234cc73904 fix: bump podman 5.4.1 2025-03-14 03:03:08 +01:00
Max GoltzscheandMax Goltzsche 42d5e903f2 fix: don't publish quadlet with image but with tar 
Add a separate stage to the Dockerfile to build the root file system of the tar archive and make the tar targets within the Makefile build that stage.

Relates to #120
 2025-03-14 02:58:32 +01:00
Max Goltzsche 57079cd646 docs: fix apparmor info & restart on boot headline 2025-02-08 01:21:14 +01:00
Max Goltzsche 87ca4f4632 chore(workflow): pin worker image to ubuntu 22.04 
This is in order to prevent the e2e tests from failing with `reexec: Permission denied` errors when running on an Ubuntu 24.04 worker
 2025-02-07 03:21:13 +01:00
Max Goltzsche 0b92bba1fd docs: mention podman apparmor profile adjustment 2025-02-07 03:20:46 +01:00
Max GoltzscheandMax Goltzsche 9b58fd7cea fix: podman 5.3.1, runc 1.2.2, passt 2024-11-21 2024-11-21 22:07:30 +00:00
Max GoltzscheandMax Goltzsche 6b2457fe0c feat: podman 5.3.0 2024-11-14 21:42:22 +00:00
Max GoltzscheandMax Goltzsche f5fa0d8f3f fix: bump podman 5.2.5 
* podman 5.2.5
* runc 1.2.1
* crun 1.18.2
* netavark 1.13.0
* aardvark-dns 1.13.1
 2024-11-08 21:54:31 +00:00
Max GoltzscheandMax Goltzsche 716e4cb72b fix: bump podman 5.2.4, runc 1.1.15 2024-10-18 00:08:05 +01:00
Max Goltzsche ecee27118e fix: bump podman 5.2.2 2024-08-21 22:49:08 +02:00
Max Goltzsche a4307e337e feat: upgrade podman 5.2.1 
Dependency upgrades:
* podman 5.2.1
* crun 1.16.1
* netavark 1.12.1
* aardvark 1.12.1
* alpine 3.20 base image
 2024-08-14 22:49:26 +02:00
Max Goltzsche 9ee2d32d28 fix: bump podman 5.1.2 + dependency update 
Updates:
* podman 5.1.2
* runc 1.13
* conmon 2.1.12
* netavark 1.11.0
* aardvark-dns 1.11.0
* passt 2024_06_24.1ee2eca
* fuse-overlayfs 1.14
 2024-07-21 19:39:46 +02:00
Max Goltzsche 84f15d2a10 feat: add seccomp.json file 
Closes #86
 2024-06-18 01:00:29 +02:00
Max Goltzsche 6923ab5fdd fix: add binaries to tar archive again 
reverting part of #87
 2024-06-18 00:26:36 +02:00
Max GoltzscheandTrent Apple 75f5141513 fix: upgrade podman 5.1.1, drop CNI support 
* podman 5.1.1
* drop CNI networking and slirp4netns in favour of netavark + pasta
* build statically linked netavark, pasta and aardvark
* conmon 2.1.11
* crun 1.15
* crun is also shipped with the normal (non-minimal) image now.
* build using golang 1.22, use alpine 3.19 base container

Co-authored-by: Trent Apple <trentapple@users.noreply.github.com>
 2024-06-16 23:24:14 +02:00
Max GoltzscheandMax Goltzsche ca6dbab6f1 fix: podman v4.9.5 2024-06-07 02:59:43 +02:00
Max GoltzscheandMax Goltzsche cdb3947f2e fix: podman 4.9.4, crun 1.14.4, CNI plugins 1.4.1 2024-03-26 01:41:13 +01:00
Max GoltzscheandMax Goltzsche df0af6cefb fix: podman 4.9.3, crun 1.14.2, slirp4netns 1.2.3 2024-02-17 03:36:20 +01:00
Max GoltzscheandMax Goltzsche df0e972ade fix: bump podman 4.9.2, runc 1.1.12, crun 1.14 2024-02-03 01:59:58 +01:00
Max GoltzscheandMax Goltzsche e5062f2a66 feat: bump podman 4.9.0 2024-01-24 01:43:20 +01:00
Max GoltzscheandMax Goltzsche bc50eeb7fb fix: upgrade podman 4.8.3, runc 1.1.11, crun 1.13 2024-01-21 14:30:20 +01:00
Max GoltzscheandMax Goltzsche 9b2578f00b fix: also ship crun arm64 binary instead of amd64 2024-01-21 14:30:20 +01:00
Max GoltzscheandMax Goltzsche 3daef584fd fix: upgrade podman 4.8.2 
* podman 4.8.2
* conmon 2.1.10
 2023-12-27 04:29:43 +01:00
Max GoltzscheandMax Goltzsche 5f598accf1 fix: upgrade podman 4.8.1 2023-12-06 21:16:56 +01:00
Max GoltzscheandMax Goltzsche 972138455b feat: upgrade podman 4.8.0 and dependencies 
* podman 4.8.0
* CNI plugins 1.4.0
* crun 1.12
* using go 1.20 to build binaries
 2023-12-06 00:40:39 +01:00
Max GoltzscheandMax Goltzsche faf84f8019 fix: bump podman 4.7.1 2023-10-24 01:54:53 +02:00
Max GoltzscheandMax Goltzsche 7026d86d8e feat: bump podman 4.7.0, update dep and go version 
dependency updates:
* podman 4.7.0
* catatonit 0.2.0
* crun 1.9.2

Using Go 1.19 on alpine:3.18 to build the binaries.
 2023-10-03 03:18:12 +02:00
Max GoltzscheandMax Goltzsche 44cf9636ab fix: bump podman 4.6.2 
updates:
* podman 4.6.2
* runc 1.1.9
* crun 1.9
* conmon 2.1.8
* slirp4netns 1.2.2
* libfuse 3.16.1
* fuseoverlayfs 1.13

Download runc instead of building it from source since static build doesn't produce static binary anymore with musl, see https://github.com/opencontainers/runc/issues/3950
 2023-09-23 22:56:26 +02:00
Max Goltzsche 74a70bfcfb fix: bump podman 4.6.1 2023-08-19 21:14:01 +02:00
Max GoltzscheandMax Goltzsche d3dccd2bff feat: bump podman 4.6.0, update dependencies 
* libfuse 3.15.1
* crun 1.8.6
* alpine:3.18

Closes #64
 2023-08-06 18:39:25 +02:00
Max Goltzsche c8ba166d9d fix: update podman 4.5.1 
dependency updates:
* podman 4.5.1
* alpine 3.18 base image
* runc 1.1.7
* crun 1.8.5
* CNI plugins 1.3.0
* fuse-overlayfs 1.12
 2023-05-29 20:32:02 +02:00
Max Goltzsche 87dc410e7c chore: secure credential usage in release pipeline 
... by avoiding to expose ghcr and dockerhub tokens within the process list.
This may not matter in practice but better be safe than sorry.
 2023-04-24 02:34:00 +02:00
Max GoltzscheandMax Goltzsche 2a93c5f869 bump podman 4.5.0, runc 1.1.6, crun 1.8.4 2023-04-15 04:06:00 +02:00
Max Goltzsche c909610885 fix: tar packaging / podman-restart service copy 2023-04-08 01:47:05 +02:00
Max GoltzscheandMax Goltzsche cbbf504e15 fix: update podman 4.4.4 and dependencies 
updates:
* podman 4.4.4
* runc 1.1.5
* crun 1.8.3
* fuse 3.14.1
* fuse-overlayfs 1.11
 2023-04-08 01:22:41 +02:00
Max GoltzscheandMax Goltzsche 9c937b09a0 fix: add catatonit binary 
Fixes #54
 2023-04-08 01:07:33 +02:00
Max Goltzsche f82c88fb03 feat: add podman-restart systemd service 2023-04-08 00:59:45 +02:00
Max GoltzscheandMax Goltzsche 9dc6f4e013 bump podman v4.4.3, crun 1.8.2, conmon 2.1.7 2023-03-24 01:48:37 +01:00
Max GoltzscheandMax Goltzsche 6da2f56c0d document rootless installation 
Relates to #52
 2023-03-24 01:48:37 +01:00
Max GoltzscheandMax Goltzsche b51c27495d fix: configure infra_image by default 
Closes #54
 2023-03-21 02:40:29 +01:00
Max GoltzscheandMax Goltzsche 907b420780 fix: bump podman v4.4.2 
* podman 4.4.2
* libfuse 3.14.0
 2023-02-24 01:59:11 +01:00
Max GoltzscheandMax Goltzsche 8c3a1f11e2 bump podman version 4.4.1 2023-02-09 04:06:05 +01:00
Max GoltzscheandMax Goltzsche 8118e8daa8 update podman 4.4.0 and dependencies 
dependency updates:
* alpine:3.17
* conmon 2.1.6
* CNI plugins 1.2.0
* libfuse 3.13.1
* fuse-overlayfs 1.10
* crun 1.8

Also, updated bats to 1.8.2
 2023-02-09 04:06:05 +01:00
Max GoltzscheandMax Goltzsche 9f86c70d3a fix subuid/subgid 2023-02-09 03:10:05 +01:00
Max GoltzscheandMax Goltzsche e5ef42a0fe chore: enable previously disabled test 
...since podman now also supports running a rootless container with an unmapped uid/gid.
 2023-02-09 03:10:05 +01:00
Max Goltzsche 18b2175682 chore: use multiarch/qemu-user-static:7.0.0-7 2022-06-24 00:53:17 +02:00
Max Goltzsche 56ad486a91 docs: how to download specific version 2022-06-24 00:51:53 +02:00
Max GoltzscheandMax Goltzsche ca8b3e0cfd update to podman 4.1.1 
updated dependencies:
* conmon 2.1.2
* libslirp 4.7.0
* slirp4netns 1.2.0
* fuse-overlayfs 1.9
* golang 1.18
* alpine 3.15
* bats 1.7.0
 2022-06-22 23:44:23 +02:00
Max GoltzscheandMax Goltzsche 6be47d0e7e update to podman 4.1.0 
updated dependencies:
* runc 1.1.1
* crun 1.4.5
* fuse 3.11.0

Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
 2022-05-08 01:24:21 +02:00
Max GoltzscheandMax Goltzsche b4b58f5842 update to podman v4.0.2. 
updated dependencies:
* runc v1.1.0
* crun 1.4.4
* conmon v2.1.0
* CNI plugins v1.1.1
* fuse-overlayfs v1.8.2

also adds new rootlessport binary.

Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
 2022-03-26 01:55:38 +01:00
Max GoltzscheandMax Goltzsche 9b623c2613 update to podman 3.4.2 2021-11-14 20:03:09 +01:00
Max GoltzscheandMax Goltzsche 1b5ee026d2 update to podman 3.4.1, crun 1.2 2021-10-21 23:56:33 +02:00
Max Goltzsche 1e63fa63a9 update to podman 3.4.0. 
also updates:
* conmon 2.0.30
* crun 1.1
* CNI plugins 1.0.1
 2021-10-02 02:00:43 +02:00
Max Goltzsche d6ec937077 align ghcr image name, update readme 2021-09-28 02:45:52 +02:00
Max GoltzscheandMax Goltzsche b84684bb93 update to podman v3.4.0-rc2 2021-09-28 02:16:44 +02:00
Max Goltzsche 2cb260e09f fix(release): migrate gh registry. 
Push to ghcr.io instead of docker.pkg.github.com.
 2021-09-27 23:54:58 +02:00
Max Goltzsche 845d54e92a fix(release): Push images to gh and dh separately. 
Apparently docker/buildx cannot push an image to multiple repos at once.
 2021-09-25 22:53:23 +02:00
Max Goltzsche f34a5cccc9 another release fix attempt. 
* initialize and check buildx builder first.
* disable push to GitHub container registry for now.
 2021-09-25 21:47:43 +02:00
Max Goltzsche 2cd5e18e0d fix docker auth using newer buildkit version. 
See https://github.com/docker/buildx/issues/327
 2021-09-25 05:09:10 +02:00
Max Goltzsche 13afc3095b fix docker authentication 2021-09-25 03:22:38 +02:00
Max Goltzsche b6603ab359 fix release workflow. 
* use gh action to setup qemu.
* make gpg the first stage of the Dockerfile. This is to avoid having to rebuild any other stage.
* use `docker buildx build` also to build the local gpg image in order to share the cache.
 2021-09-25 00:57:37 +02:00
Max Goltzsche 1a9e3b6c74 add support for linux/arm64/v8 2021-09-24 23:48:38 +02:00
Max Goltzsche 4442e1a363 Fix tar release workflow 2021-08-21 04:14:31 +02:00
Max Goltzsche 3e1d1a34a5 Upgrade podman-remote to v3.3.0 as well 2021-08-21 04:00:36 +02:00
Max GoltzscheandMax Goltzsche 8592cebdf8 Upgrade to podman 3.3.0. 
* podman v3.3.0
* CNI plugins v1.0.0
* slirp4netns v1.1.12
* fuse-overlayfs v1.7.1
* crun v0.21
 2021-08-21 03:43:54 +02:00
Max GoltzscheandMax Goltzsche 4241925f7e Migrate tests to bats. 
Turns the scripted tests into bats tests.

Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
 2021-08-21 02:51:07 +02:00
Max Goltzsche 64303f6649 Add buildtags and cgo Dockerfile args 2021-08-19 22:48:06 +02:00
Max Goltzsche bbf4517b30 Upgrade to podman 3.2.2. 
Also upgrades:
* runc to 1.0.0
* libslirp to 4.6.1
* fuse-overlayfs to 1.6

Additional changes:
* Enables podman-remote tests again.
* Uses ubuntu gpg keyservers for now because sks servers are down and keys.openpgp.org does not provide a user ID with the key which makes gpg fail.
 2021-06-27 22:47:58 +02:00
Max Goltzsche 1e9cf4bc85 podman-remote 3.2.1, crun 0.20.1, libfuse 3.10.4. 
This is a follow-up of #10 to
* bump the podman-remote version as well
* update crun and libfuse
* disable podman-remote tests for now due to a podman bug
 2021-06-19 23:04:30 +02:00
Max Goltzsche a8b41ffed4 add default seccomp.json to tar. 
Applying the image fix of #9 to the tar release as well in order to work around containers/podman#10556.
 2021-06-05 00:10:24 +02:00
Max Goltzsche 836eaa735a fix pr workflow 2021-06-04 23:30:20 +02:00
Max Goltzsche ed30366a65 Upgrade to podman 3.1.2 2021-05-02 04:04:19 +02:00
Max Goltzsche c8937e7c00 Downgrade podman dependencies. 
because with the latest containers get stuck during initialization and
build caching doesn't work.
 2021-02-21 00:45:57 +01:00
Max Goltzsche 2982b99c4d Upgrade to podman 3.0.1, remove gosu 2021-02-20 22:39:20 +01:00
Max Goltzsche c316901ad4 Update readme 2020-12-27 00:22:58 +01:00
Max Goltzsche b1442ad3ef Fix build when run by podman. 
libfuse installer had to be prevented from creating /dev/fuse which is not allowed within unprivileged podman
 2020-12-26 00:37:39 +01:00
Max Goltzsche 37ace76959 Disable podman-based build since it doesn't work 2020-12-25 23:13:02 +01:00
Max Goltzsche 76cb4c494f Support minimal tag, change uid/gid, remove stuff 
Changes:
* Builds a `minimal` image (without slirp4netns) instead of `rootless`.
* `podman` uid/gid changed from 100000 to 1000/1000 (to avoid exceeding the sub*id range).
* Default USER is root now.
* No ENTRYPOINT script provided that changes the user when container is run as root.
* The HOME env var is not specified anymore in order to use the home dir specified for the user in /etc/passwd.
* Default WORKDIR has changed from /podman to / since /podman is only relevant when running as `podman` user.
 2020-12-25 22:57:19 +01:00
Max Goltzsche 4a6f17bb70 Update readme 2020-12-24 03:58:28 +01:00
Max Goltzsche ef462f731a Fix release workflow again 2020-12-24 03:39:37 +01:00
Max Goltzsche 931902e2f3 Fix release workflow again 2020-12-24 03:32:54 +01:00
Max Goltzsche 2307694edc Fix release workflow 2020-12-24 03:22:32 +01:00
Max Goltzsche 8a3b93c110 Update readme, release archive on tag only 2020-12-24 03:10:47 +01:00
Max Goltzsche 4db3d317eb Fix gh workflow, remove tty requirement from tests 2020-12-24 02:01:45 +01:00
Max Goltzsche f5acdcdbfd Add GitHub workflows for PRs and releases 2020-12-24 01:50:59 +01:00
Max Goltzsche 4ba1329988 Build rootless image and export tar archive. 
* rootless image contains only binaries needed for rootless operations and crun.
* the tar archive contains all binaries and meant to be used for quick installation on any linux-amd64 host.
 2020-12-24 01:12:44 +01:00
Max Goltzsche 9d94f5389f Make home dir agnostic, bump to podman 2.2.1. 
Removes unnecessary explicit storage dir configuration.

Additional changes:
* Reorganizes project dir structure.
* Use unprivileged user by default in podman-remote image.
 2020-12-21 18:25:21 +01:00
Max Goltzsche 9e854e5c38 Update to fuse-overlayfs 1.2.0. 
Includes musl compatibility fix.
 2020-10-10 01:35:33 +02:00
Max Goltzsche af27b99c91 Update readme 2020-09-26 00:59:58 +02:00
Max Goltzsche b62b0fc9d5 Allow to run with any uid/gid 2020-09-25 19:22:59 +02:00
Max Goltzsche 5dbfeea7fd Update to podman 2.1.0 2020-09-25 02:29:49 +02:00
Max Goltzsche dc8ec320f6 Remove tuning and firewall CNI plugins 2020-09-25 00:53:28 +02:00
Max Goltzsche 5c23f21235 Use latest fuse-overlayfs 2020-09-25 00:43:07 +02:00
Max Goltzsche 6499a529ce Update readme 2020-08-26 21:57:47 +02:00