v1.7.0-RC1
This is the first release candidate for the v1.7.0 release of Podman. Preliminary release notes:
Features
- Added support for setting a static MAC address for containers
- Added support for creating
macvlan
networks withpodman network create
, allowing Podman containers to be attached directly to networks the host is connected to - The
podman image prune
andpodman container prune
commands now support the--filter
flag to filter what will be pruned, and now prompts for confirmation when run without--force
(
#4410 and #4411) - Podman now creates CGroup namespaces by default on systems using CGroups v2 (#4363)
- Added the
podman system reset
command to remove all Podman files and perform a factory reset of the Podman installation - Added the
--history
flag topodman images
to display previous names used by images (#4566) - Added the
--ignore
flag topodman rm
andpodman stop
to not error when requested containers no longer exist - Added the
--cidfile
flag topodman rm
andpodman stop
to read the IDs of containers to be removed or stopped from a file - The
podman play kube
command now honors Seccomp annotations (#3111) - The
podman play kube
command now honorsRunAsUser
,RunAsGroup
, andselinuxOptions
- The output format of the
podman version
command has been changed to better matchdocker version
when using the--format
flag - Rootless Podman will no longer initialize containers/storage twice, removing a potential deadlock preventing Podman commands from running while an image was being pulled ([#4591](https://
github.com//issues/4591)) - Added
tmpcopyup
andnotmpcopyup
options to the--tmpfs
and--mount type=tmpfs
flags topodman create
andpodman run
to control whether the content of directories are copied in
to tmpfs filesystems mounted over them - Added support for disabling detaching from containers by setting empty detach keys via
--detach-keys=""
- The
podman build
command now supports the--pull
and--pull-never
flags to control when images are pulled during a build
Bugfixes
- Fixed a bug where Podman would use an incorrect runtime directory as root, causing state to be deleted after root logged out and making Podman in systemd services not function properly
- Fixed a bug where the
--change
flag topodman import
andpodman commit
was not being parsed properly in many cases - Fixed a bug where detach keys specified in
libpod.conf
were not used by thepodman attach
andpodman exec
commands, which always used the global defaultctrl-p,ctrl-q
key combinat
ion (#4556) - Fixed a bug where rootless Podman was not able to run
podman pod stats
even on CGroups v2 enabled systems (#4634) - Fixed a bug where rootless Podman would fail on kernels without the
renameat2
syscall (#4570) - Fixed a bug where containers with chained network namespace dependencies (IE, container A using
--net container=B
and container B using--net container=C
) would not properly mount/e\ tc/hosts
and/etc/resolv.conf
into the container (#4626) - Fixed a bug where
podman run
with the--rm
flag and without-d
could, when run in the background, throw a 'container does not exist' error when attempting to remove the container af
ter it exited - Fixed a bug where named volume locks were not properly reacquired after a reboot, potentially leading to deadlocks when trying to start containers using the volume ([#4605](https://github\
.com//issues/4605) and #4621) - Fixed a bug where Podman could not completely remove containers if sent SIGKILL during removal, leaving the container name unusable without the
podman rm --storage
command to complete r
emoval (#3906) - Fixed a bug where checkpointing containers started with
--rm
was allowed when--export
was not specified (the container, and checkpoint, would be removed after checkpointing was compl
ete by--rm
) (#3774) - Fixed a bug where the
podman pod prune
command would fail if containers were present in the pods and the--force
flag was not passed ([#4346](https://github.com/containers/libpod/issu\
es/4346)) - Fixed a bug where containers could not set a static IP or static MAC address if they joined a non-default CNI network (#4500)
- Fixed a bug where
podman system renumber
would always throw an error if a container was mounted when it was run - Fixed a bug where
podman container restore
would fail with containers using a user namespace - Fixed a bug where rootless Podman would attempt to use the journald events backend even on systems without systemd installed
- Fixed a bug where
podman history
would sometimes not properly identify the IDs of layers in an image (#3359) - Fixed a bug where containers could not be restarted when Conmon v2.0.3 or later was used
- Fixed a bug where Podman did not check image OS and Architecture against the host when starting a container
- Fixed a bug where containers in pods did not function properly with the Kata OCI runtime (#4353)
- Fixed a bug where `podman info --format '{{ json . }}' would not produce JSON output (#4391)
- Fixed a bug where Podman would not verify if files passed to
--authfile
existed (#4328) - Fixed a bug where
podman images --digest
would not always print digests when they were available - Fixed a bug where rootless
podman run
could hang due to a race with reading and writing events - Fixed a bug where rootless Podman would print warning-level logs despite not be instructed to do so (#4456)
- Fixed a bug where
podman pull
would attempt to fetch from remote registries when pulling an unqualified image using thedocker-daemon
transport ([#4434](https://github.com/containers/\
libpod/issues/4434)) - Fixed a bug where
podman cp
would not work if STDIN was a pipe - Fixed a bug where
podman exec
could stop accepting input if anything was typed between the command being run and the exec session starting ([#4397](https://github.com/containers/libpod/\
issues/4397)) - Fixed a bug where
podman logs --tail 0
would print all lines of a container's logs, instead of no lines (#4396) - Fixed a bug where the timeout for
slirp4netns
was incorrectly set, resulting in an extremely long timeout (#4344) - Fixed a bug where the
podman stats
command would print CPU utilizations figures incorrectly (#4409)
Misc
- The fixes to runtime directory path as root can cause strange behavior if an upgrade is performed while containers are running
- Updated vendored Buildah to v1.11.6
- Updated vendored containers/storage library to v1.15.3
- Kata Containers runtimes (
kata-runtime
,kata-qemu
, andkata-fc
) are now present in the default libpod.conf, but will not be available unless Kata containers is installed on the syst
em