github.com/containers/podman/v2@v2.2.2-0.20210501105131-c1e07d070c4c/RELEASE_NOTES.md (about) 1 # Release Notes 2 3 ## 2.2.1 4 ### Changes 5 - Due to a conflict with a previously-removed field, we were forced to modify the way image volumes (mounting images into containers using `--mount type=image`) were handled in the database. As a result, containers created in Podman 2.2.0 with image volumes will not have them in v2.2.1, and these containers will need to be re-created. 6 7 ### Bugfixes 8 - Fixed a bug where rootless Podman would, on systems without the `XDG_RUNTIME_DIR` environment variable defined, use an incorrect path for the PID file of the Podman pause process, causing Podman to fail to start ([#8539](https://github.com/containers/podman/issues/8539)). 9 - Fixed a bug where containers created using Podman v1.7 and earlier were unusable in Podman due to JSON decode errors ([#8613](https://github.com/containers/podman/issues/8613)). 10 - Fixed a bug where Podman could retrieve invalid cgroup paths, instead of erroring, for containers that were not running. 11 - Fixed a bug where the `podman system reset` command would print a warning about a duplicate shutdown handler being registered. 12 - Fixed a bug where rootless Podman would attempt to mount `sysfs` in circumstances where it was not allowed; some OCI runtimes (notably `crun`) would fall back to alternatives and not fail, but others (notably `runc`) would fail to run containers. 13 - Fixed a bug where the `podman run` and `podman create` commands would fail to create containers from untagged images ([#8558](https://github.com/containers/podman/issues/8558)). 14 - Fixed a bug where remote Podman would prompt for a password even when the server did not support password authentication ([#8498](https://github.com/containers/podman/issues/8498)). 15 - Fixed a bug where the `podman exec` command did not move the Conmon process for the exec session into the correct cgroup. 16 - Fixed a bug where shell completion for the `ancestor` option to `podman ps --filter` did not work correctly. 17 - Fixed a bug where detached containers would not properly clean themselves up (or remove themselves if `--rm` was set) if the Podman command that created them was invoked with `--log-level=debug`. 18 19 ### API 20 - Fixed a bug where the Compat Create endpoint for Containers did not properly handle the `Binds` and `Mounts` parameters in `HostConfig`. 21 - Fixed a bug where the Compat Create endpoint for Containers ignored the `Name` query parameter. 22 - Fixed a bug where the Compat Create endpoint for Containers did not properly handle the "default" value for `NetworkMode` (this value is used extensively by `docker-compose`) ([#8544](https://github.com/containers/podman/issues/8544)). 23 - Fixed a bug where the Compat Build endpoint for Images would sometimes incorrectly use the `target` query parameter as the image's tag. 24 25 ### Misc 26 - Podman v2.2.0 vendored a non-released, custom version of the `github.com/spf13/cobra` package; this has been reverted to the latest upstream release to aid in packaging. 27 - Updated the containers/image library to v5.9.0 28 29 ## 2.2.0 30 ### Features 31 - Experimental support for shortname aliasing has been added. This is not enabled by default, but can be turned on by setting the environment variable `CONTAINERS_SHORT_NAME_ALIASING` to `on`. Documentation is [available here](https://github.com/containers/image/blob/master/docs/containers-registries.conf.5.md#short-name-aliasing). 32 - Initial support has been added for the `podman network connect` and `podman network disconnect` commands, which allow existing containers to modify what networks they are connected to. At present, these commands can only be used on running containers that did not specify `--network=none` when they were created. 33 - The `podman run` command now supports the `--network-alias` option to set network aliases (additional names the container can be accessed at from other containers via DNS if the `dnsname` CNI plugin is in use). Aliases can also be added and removed using the new `podman network connect` and `podman network disconnect` commands. Please note that this requires a new release (v1.1.0) of the `dnsname` plugin, and will only work on newly-created CNI networks. 34 - The `podman generate kube` command now features support for exporting container's memory and CPU limits ([#7855](https://github.com/containers/podman/issues/7855)). 35 - The `podman play kube` command now features support for setting CPU and Memory limits for containers ([#7742](https://github.com/containers/podman/issues/7742)). 36 - The `podman play kube` command now supports persistent volumes claims using Podman named volumes. 37 - The `podman play kube` command now supports Kubernetes configmaps via the `--configmap` option ([#7567](https://github.com/containers/podman/issues/7567)). 38 - The `podman play kube` command now supports a `--log-driver` option to set the log driver for created containers. 39 - The `podman play kube` command now supports a `--start` option, enabled by default, to start the pod after creating it. This allows for `podman play kube` to be more easily used in systemd unitfiles. 40 - The `podman network create` command now supports the `--ipv6` option to enable dual-stack IPv6 networking for created networks ([#7302](https://github.com/containers/podman/issues/7302)). 41 - The `podman inspect` command can now inspect pods, networks, and volumes, in addition to containers and images ([#6757](https://github.com/containers/podman/issues/6757)). 42 - The `--mount` option for `podman run` and `podman create` now supports a new type, `image`, to mount the contents of an image into the container at a given location. 43 - The Bash and ZSH completions have been completely reworked and have received significant enhancements! Additionally, support for Fish completions and completions for the `podman-remote` executable have been added. 44 - The `--log-opt` option for `podman create` and `podman run` now supports the `max-size` option to set the maximum size for a container's logs ([#7434](https://github.com/containers/podman/issues/7434)). 45 - The `--network` option to the `podman pod create` command now allows pods to be configured to use `slirp4netns` networking, even when run as root ([#6097](https://github.com/containers/podman/issues/6097)). 46 - The `podman pod stop`, `podman pod pause`, `podman pod unpause`, and `podman pod kill` commands now work on multiple containers in parallel and should be significantly faster. 47 - The `podman search` command now supports a `--list-tags` option to list all available tags for a single image in a single repository. 48 - The `podman search` command can now output JSON using the `--format=json` option. 49 - The `podman diff` and `podman mount` commands now work with all containers in the storage library, including those not created by Podman. This allows them to be used with Buildah and CRI-O containers. 50 - The `podman container exists` command now features a `--external` option to check if a container exists not just in Podman, but also in the storage library. This will allow Podman to identify Buildah and CRI-O containers. 51 - The `--tls-verify` and `--authfile` options have been enabled for use with remote Podman. 52 - The `/etc/hosts` file now includes the container's name and hostname (both pointing to localhost) when the container is run with `--net=none` ([#8095](https://github.com/containers/podman/issues/8095)). 53 - The `podman events` command now supports filtering events based on the labels of the container they occurred on using the `--filter label=key=value` option. 54 - The `podman volume ls` command now supports filtering volumes based on their labels using the `--filter label=key=value` option. 55 - The `--volume` and `--mount` options to `podman run` and `podman create` now support two new mount propagation options, `unbindable` and `runbindable`. 56 - The `name` and `id` filters for `podman pod ps` now match based on a regular expression, instead of requiring an exact match. 57 - The `podman pod ps` command now supports a new filter `status`, that matches pods in a certain state. 58 59 ### Changes 60 - The `podman network rm --force` command will now also remove pods that are using the network ([#7791](https://github.com/containers/podman/issues/7791)). 61 - The `podman volume rm`, `podman network rm`, and `podman pod rm` commands now return exit code 1 if the object specified for removal does not exist, and exit code 2 if the object is in use and the `--force` option was not given. 62 - If `/dev/fuse` is passed into Podman containers as a device, Podman will open it before starting the container to ensure that the kernel module is loaded on the host and the device is usable in the container. 63 - Global Podman options that were not supported with remote operation have been removed from `podman-remote` (e.g. `--cgroup-manager`, `--storage-driver`). 64 - Many errors have been changed to remove repetition and be more clear as to what has gone wrong. 65 - The `--storage` option to `podman rm` is now enabled by default, with slightly changed semantics. If the given container does not exist in Podman but does exist in the storage library, it will be removed even without the `--storage` option. If the container exists in Podman it will be removed normally. The `--storage` option for `podman rm` is now deprecated and will be removed in a future release. 66 - The `--storage` option to `podman ps` has been renamed to `--external`. An alias has been added so the old form of the option will continue to work. 67 - Podman now delays the SIGTERM and SIGINT signals during container creation to ensure that Podman is not stopped midway through creating a container resulting in potential resource leakage ([#7941](https://github.com/containers/podman/issues/7941)). 68 - The `podman save` command now strips signatures from images it is exporting, as the formats we export to do not support signatures ([#7659](https://github.com/containers/podman/issues/7659)). 69 - A new `Degraded` state has been added to pods. Pods that have some, but not all, of their containers running are now considered to be `Degraded` instead of `Running`. 70 - Podman will now print a warning when conflicting network options related to port forwarding (e.g. `--publish` and `--net=host`) are specified when creating a container. 71 - The `--restart on-failure` and `--rm` options for containers no longer conflict. When both are specified, the container will be restarted if it exits with a non-zero error code, and removed if it exits cleanly ([#7906](https://github.com/containers/podman/issues/7906)). 72 - Remote Podman will no longer use settings from the client's `containers.conf`; defaults will instead be provided by the server's `containers.conf` ([#7657](https://github.com/containers/podman/issues/7657)). 73 - The `podman network rm` command now has a new alias, `podman network remove` ([#8402](https://github.com/containers/podman/issues/8402)). 74 75 ### Bugfixes 76 - Fixed a bug where `podman load` on the remote client did not error when attempting to load a directory, which is not yet supported for remote use. 77 - Fixed a bug where rootless Podman could hang when the `newuidmap` binary was not installed ([#7776](https://github.com/containers/podman/issues/7776)). 78 - Fixed a bug where the `--pull` option to `podman run`, `podman create`, and `podman build` did not match Docker's behavior. 79 - Fixed a bug where sysctl settings from the `containers.conf` configuration file were applied, even if the container did not join the namespace associated with a sysctl. 80 - Fixed a bug where Podman would not return the text of errors encounted when trying to run a healthcheck for a container. 81 - Fixed a bug where Podman was accidentally setting the `containers` environment variable in addition to the expected `container` environment variable. 82 - Fixed a bug where rootless Podman using CNI networking did not properly clean up DNS entries for removed containers ([#7789](https://github.com/containers/podman/issues/7789)). 83 - Fixed a bug where the `podman untag --all` command was not supported with remote Podman. 84 - Fixed a bug where the `podman system service` command could time out even if active attach connections were present ([#7826](https://github.com/containers/podman/issues/7826)). 85 - Fixed a bug where the `podman system service` command would sometimes never time out despite no active connections being present. 86 - Fixed a bug where Podman's handling of capabilities, specifically inheritable, did not match Docker's. 87 - Fixed a bug where `podman run` would fail if the image specified was a manifest list and had already been pulled ([#7798](https://github.com/containers/podman/pull/7798)). 88 - Fixed a bug where Podman did not take search registries into account when looking up images locally ([#6381](https://github.com/containers/podman/issues/6381)). 89 - Fixed a bug where the `podman manifest inspect` command would fail for images that had already been pulled ([#7726](https://github.com/containers/podman/issues/7726)). 90 - Fixed a bug where rootless Podman would not add supplemental GIDs to containers when when a user, but not a group, was set via the `--user` option to `podman create` and `podman run` and sufficient GIDs were available to add the groups ([#7782](https://github.com/containers/podman/issues/7782)). 91 - Fixed a bug where remote Podman commands did not properly handle cases where the user gave a name that could also be a short ID for a pod or container ([#7837](https://github.com/containers/podman/issues/7837)). 92 - Fixed a bug where `podman image prune` could leave images ready to be pruned after `podman image prune` was run ([#7872](https://github.com/containers/podman/issues/7872)). 93 - Fixed a bug where the `podman logs` command with the `journald` log driver would not read all available logs ([#7476](https://github.com/containers/podman/issues/7476)). 94 - Fixed a bug where the `--rm` and `--restart` options to `podman create` and `podman run` did not conflict when a restart policy that is not `on-failure` was chosen ([#7878](https://github.com/containers/podman/issues/7878)). 95 - Fixed a bug where the `--format "table {{ .Field }}"` option to numerous Podman commands ceased to function on Podman v2.0 and up. 96 - Fixed a bug where pods did not properly share an SELinux label between their containers, resulting in containers being unable to see the processes of other containers when the pod shared a PID namespace ([#7886](https://github.com/containers/podman/issues/7886)). 97 - Fixed a bug where the `--namespace` option to `podman ps` did not work with the remote client ([#7903](https://github.com/containers/podman/issues/7903)). 98 - Fixed a bug where rootless Podman incorrectly calculated the number of UIDs available in the container if multiple different ranges of UIDs were specified. 99 - Fixed a bug where the `/etc/hosts` file would not be correctly populated for containers in a user namespace ([#7490](https://github.com/containers/podman/issues/7490)). 100 - Fixed a bug where the `podman network create` and `podman network remove` commands could race when run in parallel, with unpredictable results ([#7807](https://github.com/containers/podman/issues/7807)). 101 - Fixed a bug where the `-p` option to `podman run`, `podman create`, and `podman pod create` would, when given only a single number (e.g. `-p 80`), assign the same port for both host and container, instead of generating a random host port ([#7947](https://github.com/containers/podman/issues/7947)). 102 - Fixed a bug where Podman containers did not properly store the cgroup manager they were created with, causing them to stop functioning after the cgroup manager was changed in `containers.conf` or with the `--cgroup-manager` option ([#7830](https://github.com/containers/podman/issues/7830)). 103 - Fixed a bug where the `podman inspect` command did not include information on the CNI networks a container was connected to if it was not running. 104 - Fixed a bug where the `podman attach` command would not print a newline after detaching from the container ([#7751](https://github.com/containers/podman/issues/7751)). 105 - Fixed a bug where the `HOME` environment variable was not set properly in containers when the `--userns=keep-id` option was set ([#8004](https://github.com/containers/podman/issues/8004)). 106 - Fixed a bug where the `podman container restore` command could panic when the container in question was in a pod ([#8026](https://github.com/containers/podman/issues/8026)). 107 - Fixed a bug where the output of the `podman image trust show --raw` command was not properly formatted. 108 - Fixed a bug where the `podman runlabel` command could panic if a label to run was not given ([#8038](https://github.com/containers/podman/issues/8038)). 109 - Fixed a bug where the `podman run` and `podman start --attach` commands would exit with an error when the user detached manually using the detach keys on remote Podman ([#7979](https://github.com/containers/podman/issues/7979)). 110 - Fixed a bug where rootless CNI networking did not use the `dnsname` CNI plugin if it was not available on the host, despite it always being available in the container used for rootless networking ([#8040](https://github.com/containers/podman/issues/8040)). 111 - Fixed a bug where Podman did not properly handle cases where an OCI runtime is specified by its full path, and could revert to using another OCI runtime with the same binary path that existed in the system `$PATH` on subsequent invocations. 112 - Fixed a bug where the `--net=host` option to `podman create` and `podman run` would cause the `/etc/hosts` file to be incorrectly populated ([#8054](https://github.com/containers/podman/issues/8054)). 113 - Fixed a bug where the `podman inspect` command did not include container network information when the container shared its network namespace (IE, joined a pod or another container's network namespace via `--net=container:...`) ([#8073](https://github.com/containers/podman/issues/8073)). 114 - Fixed a bug where the `podman ps` command did not include information on all ports a container was publishing. 115 - Fixed a bug where the `podman build` command incorrectly forwarded `STDIN` into build containers from `RUN` instructions. 116 - Fixed a bug where the `podman wait` command's `--interval` option did not work when units were not specified for the duration ([#8088](https://github.com/containers/podman/issues/8088)). 117 - Fixed a bug where the `--detach-keys` and `--detach` options could be passed to `podman create` despite having no effect (and not making sense in that context). 118 - Fixed a bug where Podman could not start containers if running on a system without a `/etc/resolv.conf` file (which occurs on some WSL2 images) ([#8089](https://github.com/containers/podman/issues/8089)). 119 - Fixed a bug where the `--extract` option to `podman cp` was nonfunctional. 120 - Fixed a bug where the `--cidfile` option to `podman run` would, when the container was not run with `--detach`, only create the file after the container exited ([#8091](https://github.com/containers/podman/issues/8091)). 121 - Fixed a bug where the `podman images` and `podman images -a` commands could panic and not list any images when certain improperly-formatted images were present in storage ([#8148](https://github.com/containers/podman/issues/8148)). 122 - Fixed a bug where the `podman events` command could, when the `journald` events backend was in use, become nonfunctional when a badly-formatted event or a log message that container certain string was present in the journal ([#8125](https://github.com/containers/podman/issues/8125)). 123 - Fixed a bug where remote Podman would, when using SSH transport, not authenticate to the server using hostkeys when connecting on a port other than 22 ([#8139](https://github.com/containers/podman/issues/8139)). 124 - Fixed a bug where the `podman attach` command would not exit when containers stopped ([#8154](https://github.com/containers/podman/issues/8154)). 125 - Fixed a bug where Podman did not properly clean paths before verifying them, resulting in Podman refusing to start if the root or temporary directories were specified with extra trailing `/` characters ([#8160](https://github.com/containers/podman/issues/8160)). 126 - Fixed a bug where remote Podman did not support hashed hostnames in the `known_hosts` file on the host for establishing connections ([#8159](https://github.com/containers/podman/pull/8159)). 127 - Fixed a bug where the `podman image exists` command would return non-zero (false) when multiple potential matches for the given name existed. 128 - Fixed a bug where the `podman manifest inspect` command on images that are not manifest lists would error instead of inspecting the image ([#8023](https://github.com/containers/podman/issues/8023)). 129 - Fixed a bug where the `podman system service` command would fail if the directory the Unix socket was to be created inside did not exist ([#8184](https://github.com/containers/podman/issues/8184)). 130 - Fixed a bug where pods that shared the IPC namespace (which is done by default) did not share a `/dev/shm` filesystem between all containers in the pod ([#8181](https://github.com/containers/podman/issues/8181)). 131 - Fixed a bug where filters passed to `podman volume list` were not inclusive ([#6765](https://github.com/containers/podman/issues/6765)). 132 - Fixed a bug where the `podman volume create` command would fail when the volume's data directory already existed (as might occur when a volume was not completely removed) ([#8253](https://github.com/containers/podman/issues/8253)). 133 - Fixed a bug where the `podman run` and `podman create` commands would deadlock when trying to create a container that mounted the same named volume at multiple locations (e.g. `podman run -v testvol:/test1 -v testvol:/test2`) ([#8221](https://github.com/containers/podman/issues/8221)). 134 - Fixed a bug where the parsing of the `--net` option to `podman build` was incorrect ([#8322](https://github.com/containers/podman/issues/8322)). 135 - Fixed a bug where the `podman build` command would print the ID of the built image twice when using remote Podman ([#8332](https://github.com/containers/podman/issues/8332)). 136 - Fixed a bug where the `podman stats` command did not show memory limits for containers ([#8265](https://github.com/containers/podman/issues/8265)). 137 - Fixed a bug where the `podman pod inspect` command printed the static MAC address of the pod in a non-human-readable format ([#8386](https://github.com/containers/podman/pull/8386)). 138 - Fixed a bug where the `--tls-verify` option of the `podman play kube` command had its logic inverted (`false` would enforce the use of TLS, `true` would disable it). 139 - Fixed a bug where the `podman network rm` command would error when trying to remove `macvlan` networks and rootless CNI networks ([#8491](https://github.com/containers/podman/issues/8491)). 140 - Fixed a bug where Podman was not setting sane defaults for missing `XDG_` environment variables. 141 - Fixed a bug where remote Podman would check if volume paths to be mounted in the container existed on the host, not the server ([#8473](https://github.com/containers/podman/issues/8473)). 142 - Fixed a bug where the `podman manifest create` and `podman manifest add` commands on local images would drop any images in the manifest not pulled by the host. 143 - Fixed a bug where networks made by `podman network create` did not include the `tuning` plugin, and as such did not support setting custom MAC addresses ([#8385](https://github.com/containers/podman/issues/8385)). 144 - Fixed a bug where container healthchecks did not use `$PATH` when searching for the Podman executable to run the healthcheck. 145 - Fixed a bug where the `--ip-range` option to `podman network create` did not properly handle non-classful subnets when calculating the last usable IP for DHCP assignment ([#8448](https://github.com/containers/podman/issues/8448)). 146 - Fixed a bug where the `podman container ps` alias for `podman ps` was missing ([#8445](https://github.com/containers/podman/issues/8445)). 147 148 ### API 149 - The Compat Create endpoint for Container has received a major refactor to share more code with the Libpod Create endpoint, and should be significantly more stable. 150 - A Compat endpoint for exporting multiple images at once, `GET /images/get`, has been added ([#7950](https://github.com/containers/podman/issues/7950)). 151 - The Compat Network Connect and Network Disconnect endpoints have been added. 152 - Endpoints that deal with image registries now support a `X-Registry-Config` header to specify registry authentication configuration. 153 - The Compat Create endpoint for images now properly supports specifying images by digest. 154 - The Libpod Build endpoint for images now supports an `httpproxy` query parameter which, if set to true, will forward the server's HTTP proxy settings into the build container for `RUN` instructions. 155 - The Libpod Untag endpoint for images will now remove all tags for the given image if no repository and tag are specified for removal. 156 - Fixed a bug where the Ping endpoint misspelled a header name (`Libpod-Buildha-Version` instead of `Libpod-Buildah-Version`). 157 - Fixed a bug where the Ping endpoint sent an extra newline at the end of its response where Docker did not. 158 - Fixed a bug where the Compat Logs endpoint for containers did not send a newline character after each log line. 159 - Fixed a bug where the Compat Logs endpoint for containers would mangle line endings to change newline characters to add a preceding carriage return ([#7942](https://github.com/containers/podman/issues/7942)). 160 - Fixed a bug where the Compat Inspect endpoint for Containers did not properly list the container's stop signal ([#7917](https://github.com/containers/podman/issues/7917)). 161 - Fixed a bug where the Compat Inspect endpoint for Containers formatted the container's create time incorrectly ([#7860](https://github.com/containers/podman/issues/7860)). 162 - Fixed a bug where the Compat Inspect endpoint for Containers did not include the container's Path, Args, and Restart Count. 163 - Fixed a bug where the Compat Inspect endpoint for Containers prefixed added and dropped capabilities with `CAP_` (Docker does not do so). 164 - Fixed a bug where the Compat Info endpoint for the Engine did not include configured registries. 165 - Fixed a bug where the server could panic if a client closed a connection midway through an image pull ([#7896](https://github.com/containers/podman/issues/7896)). 166 - Fixed a bug where the Compat Create endpoint for volumes returned an error when a volume with the same name already existed, instead of succeeding with a 201 code ([#7740](https://github.com/containers/podman/issues/7740)). 167 - Fixed a bug where a client disconnecting from the Libpod or Compat events endpoints could result in the server using 100% CPU ([#7946](https://github.com/containers/podman/issues/7946)). 168 - Fixed a bug where the "no such image" error message sent by the Compat Inspect endpoint for Images returned a 404 status code with an error that was improperly formatted for Docker compatibility. 169 - Fixed a bug where the Compat Create endpoint for networks did not properly set a default for the `driver` parameter if it was not provided by the client. 170 - Fixed a bug where the Compat Inspect endpoint for images did not populate the `RootFS` field of the response. 171 - Fixed a bug where the Compat Inspect endpoint for images would omit the `ParentId` field if the image had no parent, and the `Created` field if the image did not have a creation time. 172 - Fixed a bug where the Compat Remove endpoint for Networks did not support the `Force` query parameter. 173 174 ### Misc 175 - Updated Buildah to v1.18.0 176 - Updated the containers/storage library to v1.24.1 177 - Updated the containers/image library to v5.8.1 178 - Updated the containers/common library to v0.27.0 179 180 ## 2.1.1 181 ### Changes 182 - The `podman info` command now includes the cgroup manager Podman is using. 183 184 ### Bugfixes 185 - Fixed a bug where Podman would not build with the `varlink` build tag enabled. 186 - Fixed a bug where the `podman save` command could, when asked to save multiple images, write its progress bar to the archive instead of the terminal, producing a corrupted archive. 187 - Fixed a bug where the `json-file` log driver did not write logs. 188 - Fixed a bug where `podman-remote start --attach` did not properly handle detaching using the detach keys. 189 - Fixed a bug where `podman pod ps --filter label=...` did not work. 190 - Fixed a bug where the `podman build` command did not respect the `--runtime` flag. 191 192 ### API 193 - The REST API now includes a Server header in all responses. 194 - Fixed a bug where the Libpod and Compat Attach endpoints could terminate early, before sending all output from the container. 195 - Fixed a bug where the Compat Create endpoint for containers did not properly handle the Interactive parameter. 196 - Fixed a bug where the Compat Kill endpoint for containers could continue to run after a fatal error. 197 - Fixed a bug where the Limit parameter of the Compat List endpoint for Containers did not properly handle a limit of 0 (returning nothing, instead of all containers) ([#7722](https://github.com/containers/podman/issues/7722)). 198 - The Libpod Stats endpoint for containers is being deprecated and will be replaced by a similar endpoint with additional features in a future release. 199 200 ## 2.1.0 201 ### Features 202 - A new command, `podman image mount`, has been added. This allows for an image to be mounted, read-only, to inspect its contents without creating a container from it ([#1433](https://github.com/containers/podman/issues/1433)). 203 - The `podman save` and `podman load` commands can now create and load archives containing multiple images ([#2669](https://github.com/containers/podman/issues/2669)). 204 - Rootless Podman now supports all `podman network` commands, and rootless containers can now be joined to networks. 205 - The performance of `podman build` on `ADD` and `COPY` instructions has been greatly improved, especially when a `.dockerignore` is present. 206 - The `podman run` and `podman create` commands now support a new mode for the `--cgroups` option, `--cgroups=split`. Podman will create two cgroups under the cgroup it was launched in, one for the container and one for Conmon. This mode is useful for running Podman in a systemd unit, as it ensures that all processes are retained in systemd's cgroup hierarchy ([#6400](https://github.com/containers/podman/issues/6400)). 207 - The `podman run` and `podman create` commands can now specify options to slirp4netns by using the `--network` option as follows: `--net slirp4netns:opt1,opt2`. This allows for, among other things, switching the port forwarder used by slirp4netns away from rootlessport. 208 - The `podman ps` command now features a new option, `--storage`, to show containers from Buildah, CRI-O and other applications. 209 - The `podman run` and `podman create` commands now feature a `--sdnotify` option to control the behavior of systemd's sdnotify with containers, enabling improved support for Podman in `Type=notify` units. 210 - The `podman run` command now features a `--preserve-fds` opton to pass file descriptors from the host into the container ([#6458](https://github.com/containers/podman/issues/6458)). 211 - The `podman run` and `podman create` commands can now create overlay volume mounts, by adding the `:O` option to a bind mount (e.g. `-v /test:/test:O`). Overlay volume mounts will mount a directory into a container from the host and allow changes to it, but not write those changes back to the directory on the host. 212 - The `podman play kube` command now supports the Socket HostPath type ([#7112](https://github.com/containers/podman/issues/7112)). 213 - The `podman play kube` command now supports read-only mounts. 214 - The `podman play kube` command now supports setting labels on pods from Kubernetes metadata labels. 215 - The `podman play kube` command now supports setting container restart policy ([#7656](https://github.com/containers/podman/issues/7656)). 216 - The `podman play kube` command now properly handles `HostAlias` entries. 217 - The `podman generate kube` command now adds entries to `/etc/hosts` from `--host-add` generated YAML as `HostAlias` entries. 218 - The `podman play kube` and `podman generate kube` commands now properly support `shareProcessNamespace` to share the PID namespace in pods. 219 - The `podman volume ls` command now supports the `dangling` filter to identify volumes that are dangling (not attached to any container). 220 - The `podman run` and `podman create` commands now feature a `--umask` option to set the umask of the created container. 221 - The `podman create` and `podman run` commands now feature a `--tz` option to set the timezone within the container ([#5128](https://github.com/containers/podman/issues/5128)). 222 - Environment variables for Podman can now be added in the `containers.conf` configuration file. 223 - The `--mount` option of `podman run` and `podman create` now supports a new mount type, `type=devpts`, to add a `devpts` mount to the container. This is useful for containers that want to mount `/dev/` from the host into the container, but still create a terminal. 224 - The `--security-opt` flag to `podman run` and `podman create` now supports a new option, `proc-opts`, to specify options for the container's `/proc` filesystem. 225 - Podman with the `crun` OCI runtime now supports a new option to `podman run` and `podman create`, `--cgroup-conf`, which allows for advanced configuration of cgroups on cgroups v2 systems. 226 - The `podman create` and `podman run` commands now support a `--override-variant` option, to override the architecture variant of the image that will be pulled and ran. 227 - A new global option has been added to Podman, `--runtime-flags`, which allows for setting flags to use when the OCI runtime is called. 228 - The `podman manifest add` command now supports the `--cert-dir`, `--auth-file`, `--creds`, and `--tls-verify` options. 229 230 ### Security 231 - This release resolves CVE-2020-14370, in which environment variables could be leaked between containers created using the Varlink API. 232 233 ### Changes 234 - Podman will now retry pulling an image 3 times if a pull fails due to network errors. 235 - The `podman exec` command would previously print error messages (e.g. `exec session exited with non-zero exit code -1`) when the command run exited with a non-0 exit code. It no longer does this. The `podman exec` command will still exit with the same exit code as the command run in the container did. 236 - Error messages when creating a container or pod with a name that is already in use have been improved. 237 - For read-only containers running systemd init, Podman creates a tmpfs filesystem at `/run`. This was previously limited to 65k in size and mounted `noexec`, but is now unlimited size and mounted `exec`. 238 - The `podman system reset` command no longer removes configuration files for rootless Podman. 239 240 ### Bugfixes 241 - Fixed a bug where Podman would not add an entry to `/etc/hosts` for a container if it joined another container's network namespace ([#66782](https://github.com/containers/podman/issues/6678)). 242 - Fixed a bug where `podman save --format oci-dir` saved the image in an incorrect format ([#6544](https://github.com/containers/podman/issues/6544)). 243 - Fixed a bug where privileged containers would still configure an AppArmor profile. 244 - Fixed a bug where the `--format` option of `podman system df` was not properly interpreting format codes that included backslashes ([#7149](https://github.com/containers/podman/issues/7149)). 245 - Fixed a bug where rootless Podman would ignore errors from `newuidmap` and `newgidmap`, even if `/etc/subuid` and `/etc/subgid` contained valid mappings for the user running Podman. 246 - Fixed a bug where the `podman commit` command did not properly handle single-character image names ([#7114](https://github.com/containers/podman/issues/7114)). 247 - Fixed a bug where the output of `podman ps --format=json` did not include a `Status` field ([#6980](https://github.com/containers/podman/issues/6980)). 248 - Fixed a bug where input to the `--log-level` option was no longer case-insensitive. 249 - Fixed a bug where `podman images` could segfault when an image pull was aborted while incomplete, leaving an image without a manifest ([#7444](https://github.com/containers/podman/issues/7444)). 250 - Fixed a bug where rootless Podman would try to create the `~/.config` directory when it did not exist, despite not placing any configuration files inside the directory. 251 - Fixed a bug where the output of `podman system df` was inconsistent based on whether the `-v` option was specified ([#7405](https://github.com/containers/podman/issues/7405)). 252 - Fixed a bug where `--security-opt apparmor=unconfined` would error if Apparmor was not enabled on the system ([#7545](https://github.com/containers/podman/issues/7545)). 253 - Fixed a bug where running `podman stop` on multiple containers starting with `--rm` could sometimes cause `no such container` errors ([#7384](https://github.com/containers/podman/issues/7384)). 254 - Fixed a bug where `podman-remote` would still try to contact the server when displaying help information about subcommands. 255 - Fixed a bug where the `podman build --logfile` command would segfault. 256 - Fixed a bug where the `podman generate systemd` command did not properly handle containers which were created with a name given as `--name=$NAME` instead of `--name $NAME` ([#7157](https://github.com/containers/podman/issues/7157)). 257 - Fixed a bug where the `podman ps` was ignoring the `--latest` flag. 258 - Fixed a bug where the `podman-remote kill` command would hang when a signal that did not kill the container was specified ([#7135](https://github.com/containers/podman/issues/7135)). 259 - Fixed a bug where the `--oom-score-adj` option of `podman run` and `podman create` was nonfunctional. 260 - Fixed a bug where the `--display` option of `podman runlabel` was nonfunctional. 261 - Fixed a bug where the `podman runlabel` command would not pull images that did not exist locally on the system. 262 - Fixed a bug where `podman-remote run` would not exit with the correct code with the container was removed by a `podman-remote rm -f` while `podman-remote run` was still running ([#7117](https://github.com/containers/podman/issues/7117)). 263 - Fixed a bug where the `podman-remote run --rm` command would error attempting to remove containers that had already been removed (e.g. by `podman-remote rm --force`) ([#7340](https://github.com/containers/podman/issues/7340)). 264 - Fixed a bug where `podman --user` with a numeric user and `podman run --userns=keepid` could create users in `/etc/passwd` in the container that belong to groups without a corresponding entry in `/etc/group` ([#7389](https://github.com/containers/podman/issues/7389)). 265 - Fixed a bug where `podman run --userns=keepid` could create entries in `/etc/passwd` with a UID that was already in use by another user ([#7503](https://github.com/containers/podman/issues/7503)). 266 - Fixed a bug where `podman --user` with a numeric user and `podman run --userns=keepid` could create users that could not be logged into ([#7499](https://github.com/containers/podman/issues/7499)). 267 - Fixed a bug where trying to join another container's user namespace with `--userns container:$ID` would fail ([#7547](https://github.com/containers/podman/issues/7547)). 268 - Fixed a bug where the `podman play kube` command would trim underscores from container names ([#7020](https://github.com/containers/podman/issues/7020)). 269 - Fixed a bug where the `podman attach` command would not show output when attaching to a container with a terminal ([#6523](https://github.com/containers/podman/issues/6253)). 270 - Fixed a bug where the `podman system df` command could be extremely slow when large quantities of images were present ([#7406](https://github.com/containers/podman/issues/7406)). 271 - Fixed a bug where `podman images -a` would break if any image pulled by digest was present in the store ([#7651](https://github.com/containers/podman/issues/7651)). 272 - Fixed a bug where the `--mount` option to `podman run` and `podman create` required the `type=` parameter to be passed first ([#7628](https://github.com/containers/podman/issues/7628)). 273 - Fixed a bug where the `--infra-command` parameter to `podman pod create` was nonfunctional. 274 - Fixed a bug where `podman auto-update` would fail for any container started with `--pull=always` ([#7407](https://github.com/containers/podman/issues/7407)). 275 - Fixed a bug where the `podman wait` command would only accept a single argument. 276 - Fixed a bug where the parsing of the `--volumes-from` option to `podman run` and `podman create` was broken, making it impossible to use multiple mount options at the same time ([#7701](https://github.com/containers/podman/issues/7701)). 277 - Fixed a bug where the `podman exec` command would not join executed processes to the container's supplemental groups if the container was started with both the `--user` and `--group-add` options. 278 - Fixed a bug where the `--iidfile` option to `podman-remote build` was nonfunctional. 279 280 ### API 281 - The Libpod API version has been bumped to v2.0.0 due to a breaking change in the Image List API. 282 - Docker-compatible Volume Endpoints (Create, Inspect, List, Remove, Prune) are now available! 283 - Added an endpoint for generating systemd unit files for containers. 284 - The `last` parameter to the Libpod container list endpoint now has an alias, `limit` ([#6413](https://github.com/containers/podman/issues/6413)). 285 - The Libpod image list API new returns timestamps in Unix format, as integer, as opposed to as strings 286 - The Compat Inspect endpoint for containers now includes port information in NetworkSettings. 287 - The Compat List endpoint for images now features limited support for the (deprecated) `filter` query parameter ([#6797](https://github.com/containers/podman/issues/6797)). 288 - Fixed a bug where the Compat Create endpoint for containers was not correctly handling bind mounts. 289 - Fixed a bug where the Compat Create endpoint for containers would not return a 404 when the requested image was not present. 290 - Fixed a bug where the Compat Create endpoint for containers did not properly handle Entrypoint and Command from images. 291 - Fixed a bug where name history information was not properly added in the Libpod Image List endpoint. 292 - Fixed a bug where the Libpod image search endpoint improperly populated the Description field of responses. 293 - Added a `noTrunc` option to the Libpod image search endpoint. 294 - Fixed a bug where the Pod List API would return null, instead of an empty array, when no pods were present ([#7392](https://github.com/containers/podman/issues/7392)). 295 - Fixed a bug where endpoints that hijacked would do perform the hijack too early, before being ready to send and receive data ([#7195](https://github.com/containers/podman/issues/7195)). 296 - Fixed a bug where Pod endpoints that can operate on multiple containers at once (e.g. Kill, Pause, Unpause, Stop) would not forward errors from individual containers that failed. 297 - The Compat List endpoint for networks now supports filtering results ([#7462](https://github.com/containers/podman/issues/7462)). 298 - Fixed a bug where the Top endpoint for pods would return both a 500 and 404 when run on a non-existant pod. 299 - Fixed a bug where Pull endpoints did not stream progress back to the client. 300 - The Version endpoints (Libpod and Compat) now provide version in a format compatible with Docker. 301 - All non-hijacking responses to API requests should not include headers with the version of the server. 302 - Fixed a bug where Libpod and Compat Events endpoints did not send response headers until the first event occurred ([#7263](https://github.com/containers/podman/issues/7263)). 303 - Fixed a bug where the Build endpoints (Compat and Libpod) did not stream progress to the client. 304 - Fixed a bug where the Stats endpoints (Compat and Libpod) did not properly handle clients disconnecting. 305 - Fixed a bug where the Ignore parameter to the Libpod Stop endpoint was not performing properly. 306 - Fixed a bug where the Compat Logs endpoint for containers did not stream its output in the correct format ([#7196](https://github.com/containers/podman/issues/7196)). 307 308 ### Misc 309 - Updated Buildah to v1.16.1 310 - Updated the containers/storage library to v1.23.5 311 - Updated the containers/image library to v5.6.0 312 - Updated the containers/common library to v0.22.0 313 314 ## 2.0.6 315 ### Bugfixes 316 - Fixed a bug where running systemd in a container on a cgroups v1 system would fail. 317 - Fixed a bug where `/etc/passwd` could be re-created every time a container is restarted if the container's `/etc/passwd` did not contain an entry for the user the container was started as. 318 - Fixed a bug where containers without an `/etc/passwd` file specifying a non-root user would not start. 319 - Fixed a bug where the `--remote` flag would sometimes not make remote connections and would instead attempt to run Podman locally. 320 321 ### Misc 322 - Updated the containers/common library to v0.14.10 323 324 ## 2.0.5 325 ### Features 326 - Rootless Podman will now add an entry to `/etc/passwd` for the user who ran Podman if run with `--userns=keep-id`. 327 - The `podman system connection` command has been reworked to support multiple connections, and reenabled for use! 328 - Podman now has a new global flag, `--connection`, to specify a connection to a remote Podman API instance. 329 330 ### Changes 331 - Podman's automatic systemd integration (activated by the `--systemd=true` flag, set by default) will now activate for containers using `/usr/local/sbin/init` as their command, instead of just `/usr/sbin/init` and `/sbin/init` (and any path ending in `systemd`). 332 - Seccomp profiles specified by the `--security-opt seccomp=...` flag to `podman create` and `podman run` will now be honored even if the container was created using `--privileged`. 333 334 ### Bugfixes 335 - Fixed a bug where the `podman play kube` would not honor the `hostIP` field for port forwarding ([#5964](https://github.com/containers/podman/issues/5964)). 336 - Fixed a bug where the `podman generate systemd` command would panic on an invalid restart policy being specified ([#7271](https://github.com/containers/podman/issues/7271)). 337 - Fixed a bug where the `podman images` command could take a very long time (several minutes) to complete when a large number of images were present. 338 - Fixed a bug where the `podman logs` command with the `--tail` flag would not work properly when a large amount of output would be printed ([#7230](https://github.com/containers/podman/issues/7230)). 339 - Fixed a bug where the `podman exec` command with remote Podman would not return a non-zero exit code when the exec session failed to start (e.g. invoking a non-existent command) ([#6893](https://github.com/containers/podman/issues/6893)). 340 - Fixed a bug where the `podman load` command with remote Podman would did not honor user-specified tags ([#7124](https://github.com/containers/podman/issues/7124)). 341 - Fixed a bug where the `podman system service` command, when run as a non-root user by Systemd, did not properly handle the Podman pause process and would not restart properly as a result ([#7180](https://github.com/containers/podman/issues/7180)). 342 - Fixed a bug where the `--publish` flag to `podman create`, `podman run`, and `podman pod create` did not properly handle a host IP of 0.0.0.0 (attempting to bind to literal 0.0.0.0, instead of all IPs on the system) ([#7104](https://github.com/containers/podman/issues/7014)). 343 - Fixed a bug where the `podman start --attach` command would not print the container's exit code when the command exited due to the container exiting. 344 - Fixed a bug where the `podman rm` command with remote Podman would not remove volumes, even if the `--volumes` flag was specified ([#7128](https://github.com/containers/podman/issues/7128)). 345 - Fixed a bug where the `podman run` command with remote Podman and the `--rm` flag could exit before the container was fully removed. 346 - Fixed a bug where the `--pod new:...` flag to `podman run` and `podman create` would create a pod that did not share any namespaces. 347 - Fixed a bug where the `--preserve-fds` flag to `podman run` and `podman exec` could close the wrong file descriptors while trying to close user-provided descriptors after passing them into the container. 348 - Fixed a bug where default environment variables (`$PATH` and `$TERM`) were not set in containers when not provided by the image. 349 - Fixed a bug where pod infra containers were not properly unmounted after exiting. 350 - Fixed a bug where networks created with `podman network create` with an IPv6 subnet did not properly set an IPv6 default route. 351 - Fixed a bug where the `podman save` command would not work properly when its output was piped to another command ([#7017](https://github.com/containers/podman/issues/7017)). 352 - Fixed a bug where containers using a systemd init on a cgroups v1 system could leak mounts under `/sys/fs/cgroup/systemd` to the host. 353 - Fixed a bug where `podman build` would not generate an event on completion ([#7022](https://github.com/containers/podman/issues/7022)). 354 - Fixed a bug where the `podman history` command with remote Podman printed incorrect creation times for layers ([#7122](https://github.com/containers/podman/issues/7122)). 355 - Fixed a bug where Podman would not create working directories specified by the container image if they did not exist. 356 - Fixed a bug where Podman did not clear `CMD` from the container image if the user overrode `ENTRYPOINT` ([#7115](https://github.com/containers/podman/issues/7115)). 357 - Fixed a bug where error parsing image names were not fully reported (part of the error message containing the exact issue was dropped). 358 - Fixed a bug where the `podman images` command with remote Podman did not support printing image tags in Go templates supplied to the `--format` flag ([#7123](https://github.com/containers/podman/issues/7123)). 359 - Fixed a bug where the `podman rmi --force` command would not attempt to unmount containers it was removing, which could cause a failure to remove the image. 360 - Fixed a bug where the `podman generate systemd --new` command could incorrectly quote arguments to Podman that contained whitespace, leading to nonfunctional unit files ([#7285](https://github.com/containers/podman/issues/7285)). 361 - Fixed a bug where the `podman version` command did not properly include build time and Git commit. 362 - Fixed a bug where running systemd in a Podman container on a system that did not use the `systemd` cgroup manager would fail ([#6734](https://github.com/containers/podman/issues/6734)). 363 - Fixed a bug where capabilities from `--cap-add` were not properly added when a container was started as a non-root user via `--user`. 364 - Fixed a bug where Pod infra containers were not properly cleaned up when they stopped, causing networking issues ([#7103](https://github.com/containers/podman/issues/7103)). 365 366 ### API 367 - Fixed a bug where the libpod and compat Build endpoints did not accept the `application/tar` content type (instead only accepting `application/x-tar`) ([#7185](https://github.com/containers/podman/issues/7185)). 368 - Fixed a bug where the libpod Exists endpoint would attempt to write a second header in some error conditions ([#7197](https://github.com/containers/podman/issues/7197)). 369 - Fixed a bug where compat and libpod Network Inspect and Network Remove endpoints would return a 500 instead of 404 when the requested network was not found. 370 - Added a versioned `_ping` endpoint (e.g. `http://localhost/v1.40/_ping`). 371 - Fixed a bug where containers started through a systemd-managed instance of the REST API would be shut down when `podman system service` shut down due to its idle timeout ([#7294](https://github.com/containers/podman/issues/7294)). 372 - Added stronger parameter verification for the libpod Network Create endpoint to ensure subnet mask is a valid value. 373 - The `Pod` URL parameter to the Libpod Container List endpoint has been deprecated; the information previously gated by the `Pod` boolean will now be included in the response unconditionally. 374 375 ### Misc 376 - Updated Buildah to v1.15.1 377 - Updated containers/image library to v5.5.2 378 379 ## 2.0.4 380 ### Bugfixes 381 - Fixed a bug where the output of `podman image search` did not populate the Description field as it was mistakenly assigned to the ID field. 382 - Fixed a bug where `podman build -` and `podman build` on an HTTP target would fail. 383 - Fixed a bug where rootless Podman would improperly chown the copied-up contents of anonymous volumes ([#7130](https://github.com/containers/podman/issues/7130)). 384 - Fixed a bug where Podman would sometimes HTML-escape special characters in its CLI output. 385 - Fixed a bug where the `podman start --attach --interactive` command would print the container ID of the container attached to when exiting ([#7068](https://github.com/containers/podman/pull/7068)). 386 - Fixed a bug where `podman run --ipc=host --pid=host` would only set `--pid=host` and not `--ipc=host` ([#7100](https://github.com/containers/podman/issues/7100)). 387 - Fixed a bug where the `--publish` argument to `podman run`, `podman create` and `podman pod create` would not allow binding the same container port to more than one host port ([#7062](https://github.com/containers/podman/issues/7062)). 388 - Fixed a bug where incorrect arguments to `podman images --format` could cause Podman to segfault. 389 - Fixed a bug where `podman rmi --force` on an image ID with more than one name and at least one container using the image would not completely remove containers using the image ([#7153](https://github.com/containers/podman/issues/7153)). 390 - Fixed a bug where memory usage in bytes and memory use percentage were swapped in the output of `podman stats --format=json`. 391 392 ### API 393 - Fixed a bug where the libpod and compat events endpoints would fail if no filters were specified ([#7078](https://github.com/containers/podman/issues/7078)). 394 - Fixed a bug where the `CgroupVersion` field in responses from the compat Info endpoint was prefixed by "v" (instead of just being "1" or "2", as is documented). 395 396 ## 2.0.3 397 ### Features 398 - The `podman search` command now allows wildcards in search terms. 399 - The `podman play kube` command now supports the `IfNotPresent` pull type. 400 401 ### Changes 402 - The `--disable-content-trust` flag has been added to Podman for Docker compatibility. This is a Docker-specific option and has no effect in Podman; it is provided only to ensure command line compatibility for scripts ([#7034](https://github.com/containers/podman/issues/7034)). 403 - Setting a static IP address or MAC address for rootless containers and pods now causes an error; previously, they were silently ignored. 404 - The `/sys/dev` folder is now masked in containers to prevent a potential information leak from the host. 405 406 ### Bugfixes 407 - Fixed a bug where rootless Podman would select the wrong cgroup manager on cgroups v1 systems where the user in question had an active systemd user session ([#6982](https://github.com/containers/podman/issues/6982)). 408 - Fixed a bug where systems with Apparmor could not run privileged containers ([#6933](https://github.com/containers/podman/issues/6933)). 409 - Fixed a bug where ENTRYPOINT and CMD from images were improperly handled by `podman play kube` ([#6995](https://github.com/containers/podman/issues/6995)). 410 - Fixed a bug where the `--pids-limit` flag to `podman create` and `podman run` was parsed incorrectly and was unusable ([#6908](https://github.com/containers/podman/issues/6908)). 411 - Fixed a bug where the `podman system df` command would error if untagged images were present ([#7015](https://github.com/containers/podman/issues/7015)). 412 - Fixed a bug where the `podman images` command would display incorrect tags if a port number was included in the repository. 413 - Fixed a bug where Podman did not set a default umask and default rlimits ([#6989](https://github.com/containers/podman/issues/6989)). 414 - Fixed a bug where protocols in port mappings were not recognized unless they were lower-case ([#6948](https://github.com/containers/podman/issues/6948)). 415 - Fixed a bug where information on pod infra containers was not included in the output of `podman pod inspect`. 416 - Fixed a bug where Podman's systemd detection (activated by the enabled-by-default `--systemd=true` flag) would not flag a container for systemd mode if systemd was part of the entrypoint, not the command ([#6920](https://github.com/containers/podman/issues/6920)). 417 - Fixed a bug where `podman start --attach` was not defaulting `--sig-proxy` to true ([#6928](https://github.com/containers/podman/issues/6928)). 418 - Fixed a bug where `podman inspect` would show an incorrect command (`podman system service`, the command used to start the server) for containers created by a remote Podman client. 419 - Fixed a bug where the `podman exec` command with the remote client would not print output if the `-t` or `-i` flags where not provided. 420 - Fixed a bug where some variations of the `--format {{ json . }}` to `podman info` (involving added or removed whitespace) would not be accepted ([#6927](https://github.com/containers/podman/issues/6927)). 421 - Fixed a bug where Entrypoint could not be cleared at the command line (if unset via `--entrypoint=""`, it would be reset to the image's entrypoint) ([#6935](https://github.com/containers/podman/issues/6935)). 422 423 ### API 424 - Fixed a bug where the events endpoints (both libpod and compat) could potentially panic on parsing filters. 425 - Fixed a bug where the compat Create endpoint for containers did not properly handle Entrypoint and Command. 426 - Fixed a bug where the Logs endpoint for containers (both libpod and compat) would not properly handle client disconnect, resulting in high CPU usage. 427 - The type of filters on the compat events endpoint has been adjusted to match Docker's implementation ([#6899](https://github.com/containers/podman/issues/6899)). 428 - The idle connection counter now properly handles hijacked connections. 429 - All endpoints that hijack will now properly print headers per RFC 7230 standards. 430 431 ### Misc 432 - Updated containers/common to v0.14.6 433 434 ## 2.0.2 435 ### Changes 436 - The `podman system connection` command has been temporarily disabled, as it was not functioning as expected. 437 438 ### Bugfixes 439 - Fixed a bug where the `podman ps` command would not truncate long container commands, resulting in display issues as the column could become extremely wide (the `--no-trunc` flag can be used to print the full command). 440 - Fixed a bug where `podman pod` commands operationg on multiple containers (e.g. `podman pod stop` and `podman pod kill`) would not print errors from individual containers, but only a warning that some containers had failed. 441 - Fixed a bug where the `podman system service` command would panic if a connection to the Events endpoint hung up early ([#6805](https://github.com/containers/libpod/issues/6805)). 442 - Fixed a bug where rootless Podman would create anonymous and named volumes with the wrong owner for containers run with the `--user` directive. 443 - Fixed a bug where the `TMPDIR` environment variable (used for storing temporary files while pulling images) was not being defaulted (if unset) to `/var/tmp`. 444 - Fixed a bug where the `--publish` flag to `podman create` and `podman run` required that a host port be specified if an IP address was given ([#6806](https://github.com/containers/libpod/issues/6806)). 445 - Fixed a bug where in `podman-remote` commands performing an attach (`podman run`, `podman attach`, `podman start --attach`, `podman exec`) did not properly configure the terminal on Windows. 446 - Fixed a bug where the `--remote` flag to Podman required an argument, despite being a boolean ([#6704](https://github.com/containers/libpod/issues/6704)). 447 - Fixed a bug where the `podman generate systemd --new` command could generate incorrect unit files for a pod if a container in the pod was created using the `--pod=...` flag (with an =, instead of a space, before the pod ID) ([#6766](https://github.com/containers/libpod/issues/6766)). 448 - Fixed a bug where `NPROC` and `NOFILE` rlimits could be improperly set for rootless Podman containers, causing them to fail to start. 449 - Fixed a bug where `podman mount` as rootless did not error (the `podman mount` command cannot be run rootless unless it is run inside a `podman unshare` shell). 450 - Fixed a bug where in some cases a race in events handling code could cause error messages related to retrieving events to be lost. 451 452 ### API 453 - Fixed a bug where the timestamp format for Libpod image list endpoint was incorrect - the format has been switched to Unix time. 454 - Fixed a bug where the compatability Create endpoint did not handle empty entrypoints properly. 455 - Fixed a bug where the compatibility network remove endpoint would improperly handle errors where the network was not found. 456 - Fixed a bug where containers would be created with improper permissions because of a umask issue ([#6787](https://github.com/containers/libpod/issues/6787)). 457 458 ## 2.0.1 459 ### Changes 460 - The `podman system connection` command was mistakenly omitted from the 2.0 release, and has been included here. 461 - The `podman ps --format=json` command once again includes container's creation time in a human-readable format in the `CreatedAt` key. 462 - The `podman inspect` commands on containers now displays forwarded ports in a format compatible with `docker inspect`. 463 - The `--log-level=debug` flag to `podman run` and `podman exec` will enable syslog for exit commands, ensuring that debug logs are collected for these otherwise-unlogged commands. 464 465 ### Bugfixes 466 - Fixed a bug where `podman build` did not properly handle the `--http-proxy` and `--cgroup-manager` flags. 467 - Fixed a bug where error messages related to a missing or inaccessible `/etc/subuid` or `/etc/subgid` file were very unclear ([#6572](https://github.com/containers/libpod/issues/6572)). 468 - Fixed a bug where the `podman logs --follow` command would not stop when the container being followed exited. 469 - Fixed a bug where the `--privileged` flag had mistakenly been marked as conflicting with `--group-add` and `--security-opt`. 470 - Fixed a bug where the `PODMAN_USERNS` environment variable was not being honored ([#6705](https://github.com/containers/libpod/issues/6705)). 471 - Fixed a bug where the `podman image load` command would require one argument be passed, when no arguments is also valid ([#6718](https://github.com/containers/libpod/issues/6718)). 472 - Fixed a bug where the bash completions did not include the `podman network` command and its subcommands. 473 - Fixed a bug where the mount command would not work inside of rootless containers ([#6735](https://github.com/containers/libpod/issues/6735)). 474 - Fixed a bug where SSH agent authentication support was not properly working in the `podman-remote` and `podman --remote` commands. 475 - Fixed a bug where the `podman untag` command was not erroring when no matching image was found. 476 - Fixed a bug where stop signal for containers was not being set properly if not explicitly provided. 477 - Fixed a bug where the `podman ps` command was not showing port mappings for containers which share a network namespace with another container (e.g. are part of a pod). 478 - Fixed a bug where the `--remote` flag could unintentionally be forwarded into containers when using `podman-remote`. 479 - Fixed a bug where unit files generated for pods by `podman generate systemd` would not allow individual containers to be restarted ([#6770](https://github.com/containers/libpod/issues/6770)). 480 - Fixed a bug where the `podman run` and `podman create` commands did not support all transports that `podman pull` does ([#6744](https://github.com/containers/libpod/issues/6744)). 481 - Fixed a bug where the `label` option to `--security-opt` would only be shown once in `podman inspect`, even if provided multiple times. 482 483 ### API 484 - Fixed a bug where network endpoint URLs in the compatability API were mistakenly suffixed with `/json`. 485 - Fixed a bug where the Libpod volume creation endpoint returned 200 instead of 201 on success. 486 487 ### Misc 488 - Updated containers/common to v0.14.3 489 490 ## 2.0.0 491 ### Features 492 - The REST API and `podman system service` are no longer experimental, and ready for use! 493 - The Podman command now supports remotely connections via the REST API using the `--remote` flag. 494 - The Podman remote client has been entirely rewritten to use the HTTP API instead of Varlink. 495 - The `podman system connection` command has been added to allow configuring the endpoint that `podman-remote` and `podman --remote` will connect to. 496 - The `podman generate systemd` command now supports the `--new` flag when used with pods, allowing portable services for pods to be created. 497 - The `podman play kube` command now supports running Kubernetes Deployment YAML. 498 - The `podman exec` command now supports the `--detach` flag to run commands in the container in the background. 499 - The `-p` flag to `podman run` and `podman create` now supports forwarding ports to IPv6 addresses. 500 - The `podman run`, `podman create` and `podman pod create` command now support a `--replace` flag to remove and replace any existing container (or, for `pod create`, pod) with the same name 501 - The `--restart-policy` flag to `podman run` and `podman create` now supports the `unless-stopped` restart policy. 502 - The `--log-driver` flag to `podman run` and `podman create` now supports the `none` driver, which does not log the container's output. 503 - The `--mount` flag to `podman run` and `podman create` now accepts `readonly` option as an alias to `ro`. 504 - The `podman generate systemd` command now supports the `--container-prefix`, `--pod-prefix`, and `--separator` arguments to control the name of generated unit files. 505 - The `podman network ls` command now supports the `--filter` flag to filter results. 506 - The `podman auto-update` command now supports specifying an authfile to use when pulling new images on a per-container basis using the `io.containers.autoupdate.authfile` label. 507 508 ### Changes 509 - Varlink support, including the `podman varlink` command, is deprecated and will be removed in the next release. 510 - As part of the implementation of the REST API, JSON output for some commands (`podman ps`, `podman images` most notably) has changed. 511 - Named and anonymous volumes and `tmpfs` filesystems added to containers are no longer mounted `noexec` by default. 512 513 ### Bugfixes 514 - Fixed a bug where the `podman exec` command would log to journald when run in containers loggined to journald ([#6555](https://github.com/containers/podman/issues/6555)). 515 - Fixed a bug where the `podman auto-update` command would not preserve the OS and architecture of the original image when pulling a replacement ([#6613](https://github.com/containers/podman/issues/6613)). 516 - Fixed a bug where the `podman cp` command could create an extra `merged` directory when copying into an existing directory ([#6596](https://github.com/containers/podman/issues/6596)). 517 - Fixed a bug where the `podman pod stats` command would crash on pods run with `--network=host` ([#5652](https://github.com/containers/podman/issues/5652)). 518 - Fixed a bug where containers logs written to journald did not include the name of the container. 519 - Fixed a bug where the `podman network inspect` and `podman network rm` commands did not properly handle non-default CNI configuration paths ([#6212](https://github.com/containers/podman/issues/6212)). 520 - Fixed a bug where Podman did not properly remove containers when using the Kata containers OCI runtime. 521 - Fixed a bug where `podman inspect` would sometimes incorrectly report the network mode of containers started with `--net=none`. 522 - Podman is now better able to deal with cases where `conmon` is killed before the container it is monitoring. 523 524 ### Misc 525 - The default Podman CNI configuration now sets `HairpinMode` to allow communication between containers by connecting to a forwarded port on the host. 526 - Updated Buildah to v1.15.0 527 - Updated containers/storage to v1.20.2 528 - Updated containers/image to v5.5.1 529 - Updated containers/common to v0.14.0 530 531 ## 1.9.3 532 ### Bugfixes 533 - Fixed a bug where, on FIPS enabled hosts, FIPS mode secrets were not properly mounted into containers 534 - Fixed a bug where builds run over Varlink would hang ([#6237](https://github.com/containers/podman/issues/6237)) 535 536 ### Misc 537 - Named volumes and tmpfs filesystems will no longer default to mounting `noexec` for improved compatibility with Docker 538 - Updated Buildah to v1.14.9 539 540 ## 1.9.2 541 ### Bugfixes 542 - Fixed a bug where `podman save` would fail when the target image was specified by digest ([#5234](https://github.com/containers/podman/issues/5234)) 543 - Fixed a bug where rootless containers with ports forwarded to them could panic and dump core due to a concurrency issue ([#6018](https://github.com/containers/podman/issues/6018)) 544 - Fixed a bug where rootless Podman could race when opening the rootless user namespace, resulting in commands failing to run 545 - Fixed a bug where HTTP proxy environment variables forwarded into the container by the `--http-proxy` flag could not be overridden by `--env` or `--env-file` ([#6017](https://github.com/containers/podman/issues/6017)) 546 - Fixed a bug where rootless Podman was setting resource limits on cgroups v2 systems that were not using systemd-managed cgroups (and thus did not support resource limits), resulting in containers failing to start 547 548 ### Misc 549 - Rootless containers will now automatically set their ulimits to the maximum allowed for the user running the container, to match the behavior of containers run as root 550 - Packages managed by the core Podman team will no longer include a default `libpod.conf`, instead defaulting to `containers.conf`. The default libpod.conf will remain available in the Github repository until the release of Podman 2.0 551 - The default Podman CNI network configuration now sets HairpinMode to allow containers to access other containers via ports published on the host 552 - Updated containers/common to v0.8.4 553 554 ## 1.9.1 555 ### Bugfixes 556 - Fixed a bug where healthchecks could become nonfunctional if container log paths were manually set with `--log-path` and multiple container logs were placed in the same directory ([#5915](https://github.com/containers/podman/issues/5915)) 557 - Fixed a bug where rootless Podman could, when using an older `libpod.conf`, print numerous warning messages about an invalid CGroup manager config 558 - Fixed a bug where rootless Podman would sometimes fail to close the rootless user namespace when joining it ([#5873](https://github.com/containers/podman/issues/5873)) 559 560 ### Misc 561 - Updated containers/common to v0.8.2 562 563 ## 1.9.0 564 ### Features 565 - Experimental support has been added for `podman run --userns=auto`, which automatically allocates a unique UID and GID range for the new container's user namespace 566 - The `podman play kube` command now has a `--network` flag to place the created pod in one or more CNI networks 567 - The `podman commit` command now supports an `--iidfile` flag to write the ID of the committed image to a file 568 - Initial support for the new `containers.conf` configuration file has been added. `containers.conf` allows for much more detailed configuration of some Podman functionality 569 570 ### Changes 571 - There has been a major cleanup of the `podman info` command resulting in breaking changes. Many fields have been renamed to better suit usage with APIv2 572 - All uses of the `--timeout` flag have been switched to prefer the alternative `--time`. The `--timeout` flag will continue to work, but man pages and `--help` will use the `--time` flag instead 573 574 ### Bugfixes 575 - Fixed a bug where some volume mounts from the host would sometimes not properly determine the flags they should use when mounting 576 - Fixed a bug where Podman was not propagating `$PATH` to Conmon and the OCI runtime, causing issues for some OCI runtimes that required it 577 - Fixed a bug where rootless Podman would print error messages about missing support for systemd cgroups when run in a container with no cgroup support ([#5488](https://github.com/containers/podman/issues/5488)) 578 - Fixed a bug where `podman play kube` would not properly handle container-only port mappings ([#5610](https://github.com/containers/podman/issues/5610)) 579 - Fixed a bug where the `podman container prune` command was not pruning containers in the `created` and `configured` states 580 - Fixed a bug where Podman was not properly removing CNI IP address allocations after a reboot ([#5433](https://github.com/containers/podman/issues/5433)) 581 - Fixed a bug where Podman was not properly applying the default Seccomp profile when `--security-opt` was not given at the command line 582 583 ### HTTP API 584 - Many Libpod API endpoints have been added, including `Changes`, `Checkpoint`, `Init`, and `Restore` 585 - Resolved issues where the `podman system service` command would time out and exit while there were still active connections 586 - Stability overall has greatly improved as we prepare the API for a beta release soon with Podman 2.0 587 588 ### Misc 589 - The default infra image for pods has been upgraded to `k8s.gcr.io/pause:3.2` (from 3.1) to address a bug in the architecture metadata for non-AMD64 images 590 - The `slirp4netns` networking utility in rootless Podman now uses Seccomp filtering where available for improved security 591 - Updated Buildah to v1.14.8 592 - Updated containers/storage to v1.18.2 593 - Updated containers/image to v5.4.3 594 - Updated containers/common to v0.8.1 595 596 ## 1.8.2 597 ### Features 598 - Initial support for automatically updating containers managed via Systemd unit files has been merged. This allows containers to automatically upgrade if a newer version of their image becomes available 599 600 ### Bugfixes 601 - Fixed a bug where unit files generated by `podman generate systemd --new` would not force containers to detach, causing the unit to time out when trying to start 602 - Fixed a bug where `podman system reset` could delete important system directories if run as rootless on installations created by older Podman ([#4831](https://github.com/containers/podman/issues/4831)) 603 - Fixed a bug where image built by `podman build` would not properly set the OS and Architecture they were built with ([#5503](https://github.com/containers/podman/issues/5503)) 604 - Fixed a bug where attached `podman run` with `--sig-proxy` enabled (the default), when built with Go 1.14, would repeatedly send signal 23 to the process in the container and could generate errors when the container stopped ([#5483](https://github.com/containers/podman/issues/5483)) 605 - Fixed a bug where rootless `podman run` commands could hang when forwarding ports 606 - Fixed a bug where rootless Podman would not work when `/proc` was mounted with the `hidepid` option set 607 - Fixed a bug where the `podman system service` command would use large amounts of CPU when `--timeout` was set to 0 ([#5531](https://github.com/containers/podman/issues/5531)) 608 609 ### HTTP API 610 - Initial support for Libpod endpoints related to creating and operating on image manifest lists has been added 611 - The Libpod Healthcheck and Events API endpoints are now supported 612 - The Swagger endpoint can now handle cases where no Swagger documentation has been generated 613 614 ### Misc 615 - Updated Buildah to v1.14.3 616 - Updated containers/storage to v1.16.5 617 - Several performance improvements have been made to creating containers, which should somewhat improve the performance of `podman create` and `podman run` 618 619 ## 1.8.1 620 ### Features 621 - Many networking-related flags have been added to `podman pod create` to enable customization of pod networks, including `--add-host`, `--dns`, `--dns-opt`, `--dns-search`, `--ip`, `--mac-address`, `--network`, and `--no-hosts` 622 - The `podman ps --format=json` command now includes the ID of the image containers were created with 623 - The `podman run` and `podman create` commands now feature an `--rmi` flag to remove the image the container was using after it exits (if no other containers are using said image) ([#4628](https://github.com/containers/podman/issues/4628)) 624 - The `podman create` and `podman run` commands now support the `--device-cgroup-rule` flag ([#4876](https://github.com/containers/podman/issues/4876)) 625 - While the HTTP API remains in alpha, many fixes and additions have landed. These are documented in a separate subsection below 626 - The `podman create` and `podman run` commands now feature a `--no-healthcheck` flag to disable healthchecks for a container ([#5299](https://github.com/containers/podman/issues/5299)) 627 - Containers now recognize the `io.containers.capabilities` label, which specifies a list of capabilities required by the image to run. These capabilities will be used as long as they are more restrictive than the default capabilities used 628 - YAML produced by the `podman generate kube` command now includes SELinux configuration passed into the container via `--security-opt label=...` ([#4950](https://github.com/containers/podman/issues/4950)) 629 630 ### Bugfixes 631 - Fixed CVE-2020-1726, a security issue where volumes manually populated before first being mounted into a container could have those contents overwritten on first being mounted into a container 632 - Fixed a bug where Podman containers with user namespaces in CNI networks with the DNS plugin enabled would not have the DNS plugin's nameserver added to their `resolv.conf` ([#5256](https://github.com/containers/podman/issues/5256)) 633 - Fixed a bug where trailing `/` characters in image volume definitions could cause them to not be overridden by a user-specified mount at the same location ([#5219](https://github.com/containers/podman/issues/5219)) 634 - Fixed a bug where the `label` option in `libpod.conf`, used to disable SELinux by default, was not being respected ([#5087](https://github.com/containers/podman/issues/5087)) 635 - Fixed a bug where the `podman login` and `podman logout` commands required the registry to log into be specified ([#5146](https://github.com/containers/podman/issues/5146)) 636 - Fixed a bug where detached rootless Podman containers could not forward ports ([#5167](https://github.com/containers/podman/issues/5167)) 637 - Fixed a bug where rootless Podman could fail to run if the pause process had died 638 - Fixed a bug where Podman ignored labels that were specified with only a key and no value ([#3854](https://github.com/containers/podman/issues/3854)) 639 - Fixed a bug where Podman would fail to create named volumes when the backing filesystem did not support SELinux labelling ([#5200](https://github.com/containers/podman/issues/5200)) 640 - Fixed a bug where `--detach-keys=""` would not disable detaching from a container ([#5166](https://github.com/containers/podman/issues/5166)) 641 - Fixed a bug where the `podman ps` command was too aggressive when filtering containers and would force `--all` on in too many situations 642 - Fixed a bug where the `podman play kube` command was ignoring image configuration, including volumes, working directory, labels, and stop signal ([#5174](https://github.com/containers/podman/issues/5174)) 643 - Fixed a bug where the `Created` and `CreatedTime` fields in `podman images --format=json` were misnamed, which also broke Go template output for those fields ([#5110](https://github.com/containers/podman/issues/5110)) 644 - Fixed a bug where rootless Podman containers with ports forwarded could hang when started ([#5182](https://github.com/containers/podman/issues/5182)) 645 - Fixed a bug where `podman pull` could fail to parse registry names including port numbers 646 - Fixed a bug where Podman would incorrectly attempt to validate image OS and architecture when starting containers 647 - Fixed a bug where Bash completion for `podman build -f` would not list available files that could be built ([#3878](https://github.com/containers/podman/issues/3878)) 648 - Fixed a bug where `podman commit --change` would perform incorrect validation, resulting in valid changes being rejected ([#5148](https://github.com/containers/podman/issues/5148)) 649 - Fixed a bug where `podman logs --tail` could take large amounts of memory when the log file for a container was large ([#5131](https://github.com/containers/podman/issues/5131)) 650 - Fixed a bug where Podman would sometimes incorrectly generate firewall rules on systems using `firewalld` 651 - Fixed a bug where the `podman inspect` command would not display network information for containers properly if a container joined multiple CNI networks ([#4907](https://github.com/containers/podman/issues/4907)) 652 - Fixed a bug where the `--uts` flag to `podman create` and `podman run` would only allow specifying containers by full ID ([#5289](https://github.com/containers/podman/issues/5289)) 653 - Fixed a bug where rootless Podman could segfault when passed a large number of file descriptors 654 - Fixed a bug where the `podman port` command was incorrectly interpreting additional arguments as container names, instead of port numbers 655 - Fixed a bug where units created by `podman generate systemd` did not depend on network targets, and so could start before the system network was ready ([#4130](https://github.com/containers/podman/issues/4130)) 656 - Fixed a bug where exec sessions in containers which did not specify a user would not inherit supplemental groups added to the container via `--group-add` 657 - Fixed a bug where Podman would not respect the `$TMPDIR` environment variable for placing large temporary files during some operations (e.g. `podman pull`) ([#5411](https://github.com/containers/podman/issues/5411)) 658 659 ### HTTP API 660 - Initial support for secure connections to servers via SSH tunneling has been added 661 - Initial support for the libpod `create` and `logs` endpoints for containers has been added 662 - Added a `/swagger/` endpoint to serve API documentation 663 - The `json` endpoint for containers has received many fixes 664 - Filtering images and containers has been greatly improved, with many bugs fixed and documentation improved 665 - Image creation endpoints (commit, pull, etc) have seen many fixes 666 - Server timeout has been fixed so that long operations will no longer trigger the timeout and shut the server down 667 - The `stats` endpoint for containers has seen major fixes and now provides accurate output 668 - Handling the HTTP 304 status code has been fixed for all endpoints 669 - Many fixes have been made to API documentation to ensure it matches the code 670 671 ### Misc 672 - Updated vendored Buildah to v1.14.2 673 - Updated vendored containers/storage to v1.16.2 674 - The `Created` field to `podman images --format=json` has been renamed to `CreatedSince` as part of the fix for ([#5110](https://github.com/containers/podman/issues/5110)). Go templates using the old name should still work 675 - The `CreatedTime` field to `podman images --format=json` has been renamed to `CreatedAt` as part of the fix for ([#5110](https://github.com/containers/podman/issues/5110)). Go templates using the old name should still work 676 - The `before` filter to `podman images` has been renamed to `since` for Docker compatibility. Using `before` will still work, but documentation has been changed to use the new `since` filter 677 - Using the `--password` flag to `podman login` now warns that passwords are being passed in plaintext 678 - Some common cases where Podman would deadlock have been fixed to warn the user that `podman system renumber` must be run to resolve the deadlock 679 680 ## 1.8.0 681 ### Features 682 - The `podman system service` command has been added, providing a preview of Podman's new Docker-compatible API. This API is still very new, and not yet ready for production use, but is available for early testing 683 - Rootless Podman now uses Rootlesskit for port forwarding, which should greatly improve performance and capabilities 684 - The `podman untag` command has been added to remove tags from images without deleting them 685 - The `podman inspect` command on images now displays previous names they used 686 - The `podman generate systemd` command now supports a `--new` option to generate service files that create and run new containers instead of managing existing containers 687 - Support for `--log-opt tag=` to set logging tags has been added to the `journald` log driver 688 - Added support for using Seccomp profiles embedded in images for `podman run` and `podman create` via the new `--seccomp-policy` CLI flag ([#4806](https://github.com/containers/podman/pull/4806)) 689 - The `podman play kube` command now honors pull policy ([#4880](https://github.com/containers/podman/issues/4880)) 690 691 ### Bugfixes 692 - Fixed a bug where the `podman cp` command would not copy the contents of directories when paths ending in `/.` were given ([#4717](https://github.com/containers/podman/issues/4717)) 693 - Fixed a bug where the `podman play kube` command did not properly locate Seccomp profiles specified relative to localhost ([#4555](https://github.com/containers/podman/issues/4555)) 694 - Fixed a bug where the `podman info` command for remote Podman did not show registry information ([#4793](https://github.com/containers/podman/issues/4793)) 695 - Fixed a bug where the `podman exec` command did not support having input piped into it ([#3302](https://github.com/containers/podman/issues/3302)) 696 - Fixed a bug where the `podman cp` command with rootless Podman on CGroups v2 systems did not properly determine if the container could be paused while copying ([#4813](https://github.com/containers/podman/issues/4813)) 697 - Fixed a bug where the `podman container prune --force` command could possible remove running containers if they were started while the command was running ([#4844](https://github.com/containers/podman/issues/4844)) 698 - Fixed a bug where Podman, when run as root, would not properly configure `slirp4netns` networking when requested ([#4853](https://github.com/containers/podman/pull/4853)) 699 - Fixed a bug where `podman run --userns=keep-id` did not work when the user had a UID over 65535 ([#4838](https://github.com/containers/podman/issues/4838)) 700 - Fixed a bug where rootless `podman run` and `podman create` with the `--userns=keep-id` option could change permissions on `/run/user/$UID` and break KDE ([#4846](https://github.com/containers/podman/issues/4846)) 701 - Fixed a bug where rootless Podman could not be run in a systemd service on systems using CGroups v2 ([#4833](https://github.com/containers/podman/issues/4833)) 702 - Fixed a bug where `podman inspect` would show CPUShares as 0, instead of the default (1024), when it was not explicitly set ([#4822](https://github.com/containers/podman/issues/4822)) 703 - Fixed a bug where `podman-remote push` would segfault ([#4706](https://github.com/containers/podman/issues/4706)) 704 - Fixed a bug where image healthchecks were not shown in the output of `podman inspect` ([#4799](https://github.com/containers/podman/issues/4799)) 705 - Fixed a bug where named volumes created with containers from pre-1.6.3 releases of Podman would be autoremoved with their containers if the `--rm` flag was given, even if they were given names ([#5009](https://github.com/containers/podman/issues/5009)) 706 - Fixed a bug where `podman history` was not computing image sizes correctly ([#4916](https://github.com/containers/podman/issues/4916)) 707 - Fixed a bug where Podman would not error on invalid values to the `--sort` flag to `podman images` 708 - Fixed a bug where providing a name for the image made by `podman commit` was mandatory, not optional as it should be ([#5027](https://github.com/containers/podman/issues/5027)) 709 - Fixed a bug where the remote Podman client would append an extra `"` to `%PATH` ([#4335](https://github.com/containers/podman/issues/4335)) 710 - Fixed a bug where the `podman build` command would sometimes ignore the `-f` option and build the wrong Containerfile 711 - Fixed a bug where the `podman ps --filter` command would only filter running containers, instead of all containers, if `--all` was not passed ([#5050](https://github.com/containers/podman/issues/5050)) 712 - Fixed a bug where the `podman load` command on compressed images would leave an extra copy on disk 713 - Fixed a bug where the `podman restart` command would not properly clean up the network, causing it to function differently from `podman stop; podman start` ([#5051](https://github.com/containers/podman/issues/5051)) 714 - Fixed a bug where setting the `--memory-swap` flag to `podman create` and `podman run` to `-1` (to indicate unlimited) was not supported ([#5091](https://github.com/containers/podman/issues/5091)) 715 716 ### Misc 717 - Initial work on version 2 of the Podman remote API has been merged, but is still in an alpha state and not ready for use. Read more [here](https://podman.io/releases/2020/01/17/podman-new-api.html) 718 - Many formatting corrections have been made to the manpages 719 - The changes to address ([#5009](https://github.com/containers/podman/issues/5009)) may cause anonymous volumes created by Podman versions 1.6.3 to 1.7.0 to not be removed when their container is removed 720 - Updated vendored Buildah to v1.13.1 721 - Updated vendored containers/storage to v1.15.8 722 - Updated vendored containers/image to v5.2.0 723 724 ## 1.7.0 725 ### Features 726 - Added support for setting a static MAC address for containers 727 - Added support for creating `macvlan` networks with `podman network create`, allowing Podman containers to be attached directly to networks the host is connected to 728 - The `podman image prune` and `podman container prune` commands now support the `--filter` flag to filter what will be pruned, and now prompts for confirmation when run without `--force` ([#4410](https://github.com/containers/podman/issues/4410) and [#4411](https://github.com/containers/podman/issues/4411)) 729 - Podman now creates CGroup namespaces by default on systems using CGroups v2 ([#4363](https://github.com/containers/podman/issues/4363)) 730 - Added the `podman system reset` command to remove all Podman files and perform a factory reset of the Podman installation 731 - Added the `--history` flag to `podman images` to display previous names used by images ([#4566](https://github.com/containers/podman/issues/4566)) 732 - Added the `--ignore` flag to `podman rm` and `podman stop` to not error when requested containers no longer exist 733 - Added the `--cidfile` flag to `podman rm` and `podman stop` to read the IDs of containers to be removed or stopped from a file 734 - The `podman play kube` command now honors Seccomp annotations ([#3111](https://github.com/containers/podman/issues/3111)) 735 - The `podman play kube` command now honors `RunAsUser`, `RunAsGroup`, and `selinuxOptions` 736 - The output format of the `podman version` command has been changed to better match `docker version` when using the `--format` flag 737 - Rootless Podman will no longer initialize containers/storage twice, removing a potential deadlock preventing Podman commands from running while an image was being pulled ([#4591](https://github.com/containers/podman/issues/4591)) 738 - Added `tmpcopyup` and `notmpcopyup` options to the `--tmpfs` and `--mount type=tmpfs` flags to `podman create` and `podman run` to control whether the content of directories are copied into tmpfs filesystems mounted over them 739 - Added support for disabling detaching from containers by setting empty detach keys via `--detach-keys=""` 740 - The `podman build` command now supports the `--pull` and `--pull-never` flags to control when images are pulled during a build 741 - The `podman ps -p` command now shows the name of the pod as well as its ID ([#4703](https://github.com/containers/podman/issues/4703)) 742 - The `podman inspect` command on containers will now display the command used to create the container 743 - The `podman info` command now displays information on registry mirrors ([#4553](https://github.com/containers/podman/issues/4553)) 744 745 ### Bugfixes 746 - Fixed a bug where Podman would use an incorrect runtime directory as root, causing state to be deleted after root logged out and making Podman in systemd services not function properly 747 - Fixed a bug where the `--change` flag to `podman import` and `podman commit` was not being parsed properly in many cases 748 - Fixed a bug where detach keys specified in `libpod.conf` were not used by the `podman attach` and `podman exec` commands, which always used the global default `ctrl-p,ctrl-q` key combination ([#4556](https://github.com/containers/podman/issues/4556)) 749 - Fixed a bug where rootless Podman was not able to run `podman pod stats` even on CGroups v2 enabled systems ([#4634](https://github.com/containers/podman/issues/4634)) 750 - Fixed a bug where rootless Podman would fail on kernels without the `renameat2` syscall ([#4570](https://github.com/containers/podman/issues/4570)) 751 - Fixed a bug where containers with chained network namespace dependencies (IE, container A using `--net container=B` and container B using `--net container=C`) would not properly mount `/etc/hosts` and `/etc/resolv.conf` into the container ([#4626](https://github.com/containers/podman/issues/4626)) 752 - Fixed a bug where `podman run` with the `--rm` flag and without `-d` could, when run in the background, throw a 'container does not exist' error when attempting to remove the container after it exited 753 - Fixed a bug where named volume locks were not properly reacquired after a reboot, potentially leading to deadlocks when trying to start containers using the volume ([#4605](https://github.com/containers/podman/issues/4605) and [#4621](https://github.com/containers/podman/issues/4621)) 754 - Fixed a bug where Podman could not completely remove containers if sent SIGKILL during removal, leaving the container name unusable without the `podman rm --storage` command to complete removal ([#3906](https://github.com/containers/podman/issues/3906)) 755 - Fixed a bug where checkpointing containers started with `--rm` was allowed when `--export` was not specified (the container, and checkpoint, would be removed after checkpointing was complete by `--rm`) ([#3774](https://github.com/containers/podman/issues/3774)) 756 - Fixed a bug where the `podman pod prune` command would fail if containers were present in the pods and the `--force` flag was not passed ([#4346](https://github.com/containers/podman/issues/4346)) 757 - Fixed a bug where containers could not set a static IP or static MAC address if they joined a non-default CNI network ([#4500](https://github.com/containers/podman/issues/4500)) 758 - Fixed a bug where `podman system renumber` would always throw an error if a container was mounted when it was run 759 - Fixed a bug where `podman container restore` would fail with containers using a user namespace 760 - Fixed a bug where rootless Podman would attempt to use the journald events backend even on systems without systemd installed 761 - Fixed a bug where `podman history` would sometimes not properly identify the IDs of layers in an image ([#3359](https://github.com/containers/podman/issues/3359)) 762 - Fixed a bug where containers could not be restarted when Conmon v2.0.3 or later was used 763 - Fixed a bug where Podman did not check image OS and Architecture against the host when starting a container 764 - Fixed a bug where containers in pods did not function properly with the Kata OCI runtime ([#4353](https://github.com/containers/podman/issues/4353)) 765 - Fixed a bug where `podman info --format '{{ json . }}' would not produce JSON output ([#4391](https://github.com/containers/podman/issues/4391)) 766 - Fixed a bug where Podman would not verify if files passed to `--authfile` existed ([#4328](https://github.com/containers/podman/issues/4328)) 767 - Fixed a bug where `podman images --digest` would not always print digests when they were available 768 - Fixed a bug where rootless `podman run` could hang due to a race with reading and writing events 769 - Fixed a bug where rootless Podman would print warning-level logs despite not be instructed to do so ([#4456](https://github.com/containers/podman/issues/4456)) 770 - Fixed a bug where `podman pull` would attempt to fetch from remote registries when pulling an unqualified image using the `docker-daemon` transport ([#4434](https://github.com/containers/podman/issues/4434)) 771 - Fixed a bug where `podman cp` would not work if STDIN was a pipe 772 - Fixed a bug where `podman exec` could stop accepting input if anything was typed between the command being run and the exec session starting ([#4397](https://github.com/containers/podman/issues/4397)) 773 - Fixed a bug where `podman logs --tail 0` would print all lines of a container's logs, instead of no lines ([#4396](https://github.com/containers/podman/issues/4396)) 774 - Fixed a bug where the timeout for `slirp4netns` was incorrectly set, resulting in an extremely long timeout ([#4344](https://github.com/containers/podman/issues/4344)) 775 - Fixed a bug where the `podman stats` command would print CPU utilizations figures incorrectly ([#4409](https://github.com/containers/podman/issues/4409)) 776 - Fixed a bug where the `podman inspect --size` command would not print the size of the container's read/write layer if the size was 0 ([#4744](https://github.com/containers/podman/issues/4744)) 777 - Fixed a bug where the `podman kill` command was not properly validating signals before use ([#4746](https://github.com/containers/podman/issues/4746)) 778 - Fixed a bug where the `--quiet` and `--format` flags to `podman ps` could not be used at the same time 779 - Fixed a bug where the `podman stop` command was not stopping exec sessions when a container was created without a PID namespace (`--pid=host`) 780 - Fixed a bug where the `podman pod rm --force` command was not removing anonymous volumes for containers that were removed 781 - Fixed a bug where the `podman checkpoint` command would not export all changes to the root filesystem of the container if performed more than once on the same container ([#4606](https://github.com/containers/podman/issues/4606)) 782 - Fixed a bug where containers started with `--rm` would not be automatically removed on being stopped if an exec session was running inside the container ([#4666](https://github.com/containers/podman/issues/4666)) 783 784 ### Misc 785 - The fixes to runtime directory path as root can cause strange behavior if an upgrade is performed while containers are running 786 - Updated vendored Buildah to v1.12.0 787 - Updated vendored containers/storage library to v1.15.4 788 - Updated vendored containers/image library to v5.1.0 789 - Kata Containers runtimes (`kata-runtime`, `kata-qemu`, and `kata-fc`) are now present in the default libpod.conf, but will not be available unless Kata containers is installed on the system 790 - Podman previously did not allow the creation of containers with a memory limit lower than 4MB. This restriction has been removed, as the `crun` runtime can create containers with significantly less memory 791 792 ## 1.6.3 793 ### Features 794 - Handling of the `libpod.conf` configuration file has seen major changes. Most significantly, rootless users will no longer automatically receive a complete configuration file when they first use Podman, and will instead only receive differences from the global configuration. 795 - Initial support for the CNI DNS plugin, which allows containers to resolve the IPs of other containers via DNS name, has been added 796 - Podman now supports anonymous named volumes, created by specifying only a destination to the `-v` flag to the `podman create` and `podman run` commands 797 - Named volumes now support `uid` and `gid` options in `--opt o=...` to set UID and GID of the created volume 798 799 ### Bugfixes 800 - Fixed a bug where the `podman start` command would print container ID, instead of name, when starting containers given their name 801 - Fixed a bug where named volumes with options did not properly detect issues with mounting the volume, leading to an inconsistent state ([#4303](https://github.com/containers/podman/issues/4303)) 802 - Fixed a bug where incorrect Seccomp profiles were used in containers generated by `podman play kube` 803 - Fixed a bug where processes started by `podman exec` would have the wrong SELinux label in some circumstances ([#4361](https://github.com/containers/podman/issues/4361)) 804 - Fixed a bug where error messages from `slirp4netns` would be lost 805 - Fixed a bug where `podman run --network=$NAME` would not throw an error in rootless Podman, where CNI networks are not supported 806 - Fixed a bug where `podman network create` would throw confusing errors when trying to create a volume with a name that already exists 807 - Fixed a bug where Podman would not error if the `systemd` CGroup manager was specified, but systemd could not be contacted over DBus 808 - Fixed a bug where image volumes were mounted `noexec` ([#4318](https://github.com/containers/podman/issues/4318)) 809 - Fixed a bug where the `podman stats` command required the name of a container to be given, instead of showing all containers when no container was specified ([#4274](https://github.com/containers/podman/issues/4274)) 810 - Fixed a bug where the `podman volume inspect` command would not show the options that named volumes were created with 811 - Fixed a bug where custom storage configuration was not written to `storage.conf` at time of first creation for rootless Podman ([#2659](https://github.com/containers/podman/issues/2659)) 812 - Fixed a bug where remote Podman did not support shell redirection of container output 813 814 ### Misc 815 - Updated vendored containers/image library to v5.0 816 - Initial support for images using manifest lists has been added, though commands for directly interacting with manifests are still missing 817 - Support for pushing to and pulling from OSTree has been removed due to deprecation in the containers/image library 818 - Rootless Podman no longer enables linger on systems with systemd as init by default. As such, containers will now be killed when the user who ran them logs out, unless linger is explicitly enabled using [loginctl](https://www.freedesktop.org/software/systemd/man/loginctl.html) 819 - Podman will now check the version of `conmon` that is in use to ensure it is sufficient 820 821 ## 1.6.2 822 ### Features 823 - Added a `--runtime` flag to `podman system migrate` to allow the OCI runtime for all containers to be reset, to ease transition to the `crun` runtime on CGroups V2 systems until `runc` gains full support 824 - The `podman rm` command can now remove containers in broken states which previously could not be removed 825 - The `podman info` command, when run without root, now shows information on UID and GID mappings in the rootless user namespace 826 - Added `podman build --squash-all` flag, which squashes all layers (including those of the base image) into one layer 827 - The `--systemd` flag to `podman run` and `podman create` now accepts a string argument and allows a new value, `always`, which forces systemd support without checking if the the container entrypoint is systemd 828 829 ### Bugfixes 830 - Fixed a bug where the `podman top` command did not work on systems using CGroups V2 ([#4192](https://github.com/containers/podman/issues/4192)) 831 - Fixed a bug where rootless Podman could double-close a file, leading to a panic 832 - Fixed a bug where rootless Podman could fail to retrieve some containers while refreshing the state 833 - Fixed a bug where `podman start --attach --sig-proxy=false` would still proxy signals into the container 834 - Fixed a bug where Podman would unconditionally use a non-default path for authentication credentials (`auth.json`), breaking `podman login` integration with `skopeo` and other tools using the containers/image library 835 - Fixed a bug where `podman ps --format=json` and `podman images --format=json` would display `null` when no results were returned, instead of valid JSON 836 - Fixed a bug where `podman build --squash` was incorrectly squashing all layers into one, instead of only new layers 837 - Fixed a bug where rootless Podman would allow volumes with options to be mounted (mounting volumes requires root), creating an inconsistent state where volumes reported as mounted but were not ([#4248](https://github.com/containers/podman/issues/4248)) 838 - Fixed a bug where volumes which failed to unmount could not be removed ([#4247](https://github.com/containers/podman/issues/4247)) 839 - Fixed a bug where Podman incorrectly handled some errors relating to unmounted or missing containers in containers/storage 840 - Fixed a bug where `podman stats` was broken on systems running CGroups V2 when run rootless ([#4268](https://github.com/containers/podman/issues/4268)) 841 - Fixed a bug where the `podman start` command would print the short container ID, instead of the full ID 842 - Fixed a bug where containers created with an OCI runtime that is no longer available (uninstalled or removed from the config file) would not appear in `podman ps` and could not be removed via `podman rm` 843 - Fixed a bug where containers restored via `podman container restore --import` would retain the CGroup path of the original container, even if their container ID changed; thus, multiple containers created from the same checkpoint would all share the same CGroup 844 845 ### Misc 846 - The default PID limit for containers is now set to 4096. It can be adjusted back to the old default (unlimited) by passing `--pids-limit 0` to `podman create` and `podman run` 847 - The `podman start --attach` command now automatically attaches `STDIN` if the container was created with `-i` 848 - The `podman network create` command now validates network names using the same regular expression as container and pod names 849 - The `--systemd` flag to `podman run` and `podman create` will now only enable systemd mode when the binary being run inside the container is `/sbin/init`, `/usr/sbin/init`, or ends in `systemd` (previously detected any path ending in `init` or `systemd`) 850 - Updated vendored Buildah to 1.11.3 851 - Updated vendored containers/storage to 1.13.5 852 - Updated vendored containers/image to 4.0.1 853 854 ## 1.6.1 855 ### Bugfixes 856 - Fixed a bug where rootless Podman on systems using CGroups V2 would not function with the `cgroupfs` CGroups manager 857 - Fixed a bug where rootless Podman could not correctly identify the DBus session address, causing containers to fail to start ([#4162](https://github.com/containers/podman/issues/4162)) 858 - Fixed a bug where rootless Podman with `slirp4netns` networking would fail to start containers due to mount leaks 859 860 ## 1.6.0 861 ### Features 862 - The `podman network create`, `podman network rm`, `podman network inspect`, and `podman network ls` commands have been added to manage CNI networks used by Podman 863 - The `podman volume create` command can now create and mount volumes with options, allowing volumes backed by NFS, tmpfs, and many other filesystems 864 - Podman can now run containers without CGroups for better integration with systemd by using the `--cgroups=disabled` flag with `podman create` and `podman run`. This is presently only supported with the `crun` OCI runtime 865 - The `podman volume rm` and `podman volume inspect` commands can now refer to volumes by an unambiguous partial name, in addition to full name (e.g. `podman volume rm myvol` to remove a volume named `myvolume`) ([#3891](https://github.com/containers/podman/issues/3891)) 866 - The `podman run` and `podman create` commands now support the `--pull` flag to allow forced re-pulling of images ([#3734](https://github.com/containers/podman/issues/3734)) 867 - Mounting volumes into a container using `--volume`, `--mount`, and `--tmpfs` now allows the `suid`, `dev`, and `exec` mount options (the inverse of `nosuid`, `nodev`, `noexec`) ([#3819](https://github.com/containers/podman/issues/3819)) 868 - Mounting volumes into a container using `--mount` now allows the `relabel=Z` and `relabel=z` options to relabel mounts. 869 - The `podman push` command now supports the `--digestfile` option to save a file containing the pushed digest 870 - Pods can now have their hostname set via `podman pod create --hostname` or providing Pod YAML with a hostname set to `podman play kube` ([#3732](https://github.com/containers/podman/issues/3732)) 871 - The `podman image sign` command now supports the `--cert-dir` flag 872 - The `podman run` and `podman create` commands now support the `--security-opt label=filetype:$LABEL` flag to set the SELinux label for container files 873 - The remote Podman client now supports healthchecks 874 875 ### Bugfixes 876 - Fixed a bug where remote `podman pull` would panic if a Varlink connection was not available ([#4013](https://github.com/containers/podman/issues/4013)) 877 - Fixed a bug where `podman exec` would not properly set terminal size when creating a new exec session ([#3903](https://github.com/containers/podman/issues/3903)) 878 - Fixed a bug where `podman exec` would not clean up socket symlinks on the host ([#3962](https://github.com/containers/podman/issues/3962)) 879 - Fixed a bug where Podman could not run systemd in containers that created a CGroup namespace 880 - Fixed a bug where `podman prune -a` would attempt to prune images used by Buildah and CRI-O, causing errors ([#3983](https://github.com/containers/podman/issues/3983)) 881 - Fixed a bug where improper permissions on the `~/.config` directory could cause rootless Podman to use an incorrect directory for storing some files 882 - Fixed a bug where the bash completions for `podman import` threw errors 883 - Fixed a bug where Podman volumes created with `podman volume create` would not copy the contents of their mountpoint the first time they were mounted into a container ([#3945](https://github.com/containers/podman/issues/3945)) 884 - Fixed a bug where rootless Podman could not run `podman exec` when the container was not run inside a CGroup owned by the user ([#3937](https://github.com/containers/podman/issues/3937)) 885 - Fixed a bug where `podman play kube` would panic when given Pod YAML without a `securityContext` ([#3956](https://github.com/containers/podman/issues/3956)) 886 - Fixed a bug where Podman would place files incorrectly when `storage.conf` configuration items were set to the empty string ([#3952](https://github.com/containers/podman/issues/3952)) 887 - Fixed a bug where `podman build` did not correctly inherit Podman's CGroup configuration, causing crashed on CGroups V2 systems ([#3938](https://github.com/containers/podman/issues/3938)) 888 - Fixed a bug where `podman cp` would improperly copy files on the host when copying a symlink in the container that included a glob operator ([#3829](https://github.com/containers/podman/issues/3829)) 889 - Fixed a bug where remote `podman run --rm` would exit before the container was completely removed, allowing race conditions when removing container resources ([#3870](https://github.com/containers/podman/issues/3870)) 890 - Fixed a bug where rootless Podman would not properly handle changes to `/etc/subuid` and `/etc/subgid` after a container was launched 891 - Fixed a bug where rootless Podman could not include some devices in a container using the `--device` flag ([#3905](https://github.com/containers/podman/issues/3905)) 892 - Fixed a bug where the `commit` Varlink API would segfault if provided incorrect arguments ([#3897](https://github.com/containers/podman/issues/3897)) 893 - Fixed a bug where temporary files were not properly cleaned up after a build using remote Podman ([#3869](https://github.com/containers/podman/issues/3869)) 894 - Fixed a bug where `podman remote cp` crashed instead of reporting it was not yet supported ([#3861](https://github.com/containers/podman/issues/3861)) 895 - Fixed a bug where `podman exec` would run as the wrong user when execing into a container was started from an image with Dockerfile `USER` (or a user specified via `podman run --user`) ([#3838](https://github.com/containers/podman/issues/3838)) 896 - Fixed a bug where images pulled using the `oci:` transport would be improperly named 897 - Fixed a bug where `podman varlink` would hang when managed by systemd due to SD_NOTIFY support conflicting with Varlink ([#3572](https://github.com/containers/podman/issues/3572)) 898 - Fixed a bug where mounts to the same destination would sometimes not trigger a conflict, causing a race as to which was actually mounted 899 - Fixed a bug where `podman exec --preserve-fds` caused Podman to hang ([#4020](https://github.com/containers/podman/issues/4020)) 900 - Fixed a bug where removing an unmounted container that was unmounted might sometimes not properly clean up the container ([#4033](https://github.com/containers/podman/issues/4033)) 901 - Fixed a bug where the Varlink server would freeze when run in a systemd unit file ([#4005](https://github.com/containers/podman/issues/4005)) 902 - Fixed a bug where Podman would not properly set the `$HOME` environment variable when the OCI runtime did not set it 903 - Fixed a bug where rootless Podman would incorrectly print warning messages when an OCI runtime was not found ([#4012](https://github.com/containers/podman/issues/4012)) 904 - Fixed a bug where named volumes would conflict with, instead of overriding, `tmpfs` filesystems added by the `--read-only-tmpfs` flag to `podman create` and `podman run` 905 - Fixed a bug where `podman cp` would incorrectly make the target directory when copying to a symlink which pointed to a nonexistent directory ([#3894](https://github.com/containers/podman/issues/3894)) 906 - Fixed a bug where remote Podman would incorrectly read `STDIN` when the `-i` flag was not set ([#4095](https://github.com/containers/podman/issues/4095)) 907 - Fixed a bug where `podman play kube` would create an empty pod when given an unsupported YAML type ([#4093](https://github.com/containers/podman/issues/4093)) 908 - Fixed a bug where `podman import --change` improperly parsed `CMD` ([#4000](https://github.com/containers/podman/issues/4000)) 909 910 ### Misc 911 - Significant changes were made to Podman volumes in this release. If you have pre-existing volumes, it is strongly recommended to run `podman system renumber` after upgrading. 912 - Version 0.8.1 or greater of the CNI Plugins is now required for Podman 913 - Version 2.0.1 or greater of Conmon is strongly recommended 914 - Updated vendored Buildah to v1.11.2 915 - Updated vendored containers/storage library to v1.13.4 916 - Improved error messages when trying to create a pod with no name via `podman play kube` 917 - Improved error messages when trying to run `podman pause` or `podman stats` on a rootless container on a system without CGroups V2 enabled 918 - `TMPDIR` has been set to `/var/tmp` by default to better handle large temporary files 919 - `podman wait` has been optimized to detect stopped containers more rapidly 920 - Podman containers now include a `ContainerManager` annotation indicating they were created by `libpod` 921 - The `podman info` command now includes information about `slirp4netns` and `fuse-overlayfs` if they are available 922 - Podman no longer sets a default size of 65kb for tmpfs filesystems 923 - The default Podman CNI network has been renamed in an attempt to prevent conflicts with CRI-O when both are run on the same system. This should only take effect on system restart 924 - The output of `podman volume inspect` has been more closely matched to `docker volume inspect` 925 926 ## 1.5.1 927 ### Features 928 - The hostname of pods is now set to the pod's name 929 930 ### Bugfixes 931 - Fixed a bug where `podman run` and `podman create` did not honor the `--authfile` option ([#3730](https://github.com/containers/podman/issues/3730)) 932 - Fixed a bug where containers restored with `podman container restore --import` would incorrectly duplicate the Conmon PID file of the original container 933 - Fixed a bug where `podman build` ignored the default OCI runtime configured in `libpod.conf` 934 - Fixed a bug where `podman run --rm` (or force-removing any running container with `podman rm --force`) were not retrieving the correct exit code ([#3795](https://github.com/containers/podman/issues/3795)) 935 - Fixed a bug where Podman would exit with an error if any configured hooks directory was not present 936 - Fixed a bug where `podman inspect` and `podman commit` would not use the correct `CMD` for containers run with `podman play kube` 937 - Fixed a bug created pods when using rootless Podman and CGroups V2 ([#3801](https://github.com/containers/podman/issues/3801)) 938 - Fixed a bug where the `podman events` command with the `--since` or `--until` options could take a very long time to complete 939 940 ### Misc 941 - Rootless Podman will now inherit OCI runtime configuration from the root configuration ([#3781](https://github.com/containers/podman/issues/3781)) 942 - Podman now properly sets a user agent while contacting registries ([#3788](https://github.com/containers/podman/issues/3788)) 943 944 ## 1.5.0 945 ### Features 946 - Podman containers can now join the user namespaces of other containers with `--userns=container:$ID`, or a user namespace at an arbitrary path with `--userns=ns:$PATH` 947 - Rootless Podman can experimentally squash all UIDs and GIDs in an image to a single UID and GID (which does not require use of the `newuidmap` and `newgidmap` executables) by passing `--storage-opt ignore_chown_errors` 948 - The `podman generate kube` command now produces YAML for any bind mounts the container has created ([#2303](https://github.com/containers/podman/issues/2303)) 949 - The `podman container restore` command now features a new flag, `--ignore-static-ip`, that can be used with `--import` to import a single container with a static IP multiple times on the same host 950 - Added the ability for `podman events` to output JSON by specifying `--format=json` 951 - If the OCI runtime or `conmon` binary cannot be found at the paths specified in `libpod.conf`, Podman will now also search for them in the calling user's path 952 - Added the ability to use `podman import` with URLs ([#3609](https://github.com/containers/podman/issues/3609)) 953 - The `podman ps` command now supports filtering names using regular expressions ([#3394](https://github.com/containers/podman/issues/3394)) 954 - Rootless Podman containers with `--privileged` set will now mount in all host devices that the user can access 955 - The `podman create` and `podman run` commands now support the `--env-host` flag to forward all environment variables from the host into the container 956 - Rootless Podman now supports healthchecks ([#3523](https://github.com/containers/podman/issues/3523)) 957 - The format of the `HostConfig` portion of the output of `podman inspect` on containers has been improved and synced with Docker 958 - Podman containers now support CGroup namespaces, and can create them by passing `--cgroupns=private` to `podman run` or `podman create` 959 - The `podman create` and `podman run` commands now support the `--ulimit=host` flag, which uses any ulimits currently set on the host for the container 960 - The `podman rm` and `podman rmi` commands now use different exit codes to indicate 'no such container' and 'container is running' errors 961 - Support for CGroups V2 through the `crun` OCI runtime has been greatly improved, allowing resource limits to be set for rootless containers when the CGroups V2 hierarchy is in use 962 963 ### Bugfixes 964 - Fixed a bug where a race condition could cause `podman restart` to fail to start containers with ports 965 - Fixed a bug where containers restored from a checkpoint would not properly report the time they were started at 966 - Fixed a bug where `podman search` would return at most 25 results, even when the maximum number of results was set higher 967 - Fixed a bug where `podman play kube` would not honor capabilities set in imported YAML ([#3689](https://github.com/containers/podman/issues/3689)) 968 - Fixed a bug where `podman run --env`, when passed a single key (to use the value from the host), would set the environment variable in the container even if it was not set on the host ([#3648](https://github.com/containers/podman/issues/3648)) 969 - Fixed a bug where `podman commit --changes` would not properly set environment variables 970 - Fixed a bug where Podman could segfault while working with images with no history 971 - Fixed a bug where `podman volume rm` could remove arbitrary volumes if given an ambiguous name ([#3635](https://github.com/containers/podman/issues/3635)) 972 - Fixed a bug where `podman exec` invocations leaked memory by not cleaning up files in tmpfs 973 - Fixed a bug where the `--dns` and `--net=container` flags to `podman run` and `podman create` were not mutually exclusive ([#3553](https://github.com/containers/podman/issues/3553)) 974 - Fixed a bug where rootless Podman would be unable to run containers when less than 5 UIDs were available 975 - Fixed a bug where containers in pods could not be removed without removing the entire pod ([#3556](https://github.com/containers/podman/issues/3556)) 976 - Fixed a bug where Podman would not properly clean up all CGroup controllers for created cgroups when using the `cgroupfs` CGroup driver 977 - Fixed a bug where Podman containers did not properly clean up files in tmpfs, resulting in a memory leak as containers stopped 978 - Fixed a bug where healthchecks from images would not use default settings for interval, retries, timeout, and start period when they were not provided by the image ([#3525](https://github.com/containers/podman/issues/3525)) 979 - Fixed a bug where healthchecks using the `HEALTHCHECK CMD` format where not properly supported ([#3507](https://github.com/containers/podman/issues/3507)) 980 - Fixed a bug where volume mounts using relative source paths would not be properly resolved ([#3504](https://github.com/containers/podman/issues/3504)) 981 - Fixed a bug where `podman run` did not use authorization credentials when a custom path was specified ([#3524](https://github.com/containers/podman/issues/3524)) 982 - Fixed a bug where containers checkpointed with `podman container checkpoint` did not properly set their finished time 983 - Fixed a bug where running `podman inspect` on any container not created with `podman run` or `podman create` (for example, pod infra containers) would result in a segfault ([#3500](https://github.com/containers/podman/issues/3500)) 984 - Fixed a bug where healthcheck flags for `podman create` and `podman run` were incorrectly named ([#3455](https://github.com/containers/podman/pull/3455)) 985 - Fixed a bug where Podman commands would fail to find targets if a partial ID was specified that was ambiguous between a container and pod ([#3487](https://github.com/containers/podman/issues/3487)) 986 - Fixed a bug where restored containers would not have the correct SELinux label 987 - Fixed a bug where Varlink endpoints were not working properly if `more` was not correctly specified 988 - Fixed a bug where the Varlink PullImage endpoint would crash if an error occurred ([#3715](https://github.com/containers/podman/issues/3715)) 989 - Fixed a bug where the `--mount` flag to `podman create` and `podman run` did not allow boolean arguments for its `ro` and `rw` options ([#2980](https://github.com/containers/podman/issues/2980)) 990 - Fixed a bug where pods did not properly share the UTS namespace, resulting in incorrect behavior from some utilities which rely on hostname ([#3547](https://github.com/containers/podman/issues/3547)) 991 - Fixed a bug where Podman would unconditionally append `ENTRYPOINT` to `CMD` during `podman commit` (and when reporting `CMD` in `podman inspect`) ([#3708](https://github.com/containers/podman/issues/3708)) 992 - Fixed a bug where `podman events` with the `journald` events backend would incorrectly print 6 previous events when only new events were requested ([#3616](https://github.com/containers/podman/issues/3616)) 993 - Fixed a bug where `podman port` would exit prematurely when a port number was specified ([#3747](https://github.com/containers/podman/issues/3747)) 994 - Fixed a bug where passing `.` as an argument to the `--dns-search` flag to `podman create` and `podman run` was not properly clearing DNS search domains in the container 995 996 ### Misc 997 - Updated vendored Buildah to v1.10.1 998 - Updated vendored containers/image to v3.0.2 999 - Updated vendored containers/storage to v1.13.1 1000 - Podman now requires conmon v2.0.0 or higher 1001 - The `podman info` command now displays the events logger being in use 1002 - The `podman inspect` command on containers now includes the ID of the pod a container has joined and the PID of the container's conmon process 1003 - The `-v` short flag for `podman --version` has been re-added 1004 - Error messages from `podman pull` should be significantly clearer 1005 - The `podman exec` command is now available in the remote client 1006 1007 ## 1.4.4 1008 ### Bugfixes 1009 - Fixed a bug where rootless Podman would attempt to use the entire root configuration if no rootless configuration was present for the user, breaking rootless Podman for new installations 1010 - Fixed a bug where rootless Podman's pause process would block SIGTERM, preventing graceful system shutdown and hanging until the system's init send SIGKILL 1011 - Fixed a bug where running Podman as root with `sudo -E` would not work after running rootless Podman at least once 1012 - Fixed a bug where options for `tmpfs` volumes added with the `--tmpfs` flag were being ignored 1013 - Fixed a bug where images with no layers could not properly be displayed and removed by Podman 1014 - Fixed a bug where locks were not properly freed on failure to create a container or pod 1015 1016 ### Misc 1017 - Updated containers/storage to v1.12.13 1018 1019 ## 1.4.3 1020 ### Features 1021 - Podman now has greatly improved support for containers using multiple OCI runtimes. Containers now remember if they were created with a different runtime using `--runtime` and will always use that runtime 1022 - The `cached` and `delegated` options for volume mounts are now allowed for Docker compatibility ([#3340](https://github.com/containers/podman/issues/3340)) 1023 - The `podman diff` command now supports the `--latest` flag 1024 1025 ### Bugfixes 1026 - Fixed a bug where `podman cp` on a single file would create a directory at the target and place the file in it ([#3384](https://github.com/containers/podman/issues/3384)) 1027 - Fixed a bug where `podman inspect --format '{{.Mounts}}'` would print a hexadecimal address instead of a container's mounts 1028 - Fixed a bug where rootless Podman would not add an entry to container's `/etc/hosts` files for their own hostname ([#3405](https://github.com/containers/podman/issues/3405)) 1029 - Fixed a bug where `podman ps --sync` would segfault ([#3411](https://github.com/containers/podman/issues/3411)) 1030 - Fixed a bug where `podman generate kube` would produce an invalid ports configuration ([#3408](https://github.com/containers/podman/issues/3408)) 1031 1032 ### Misc 1033 - Podman now performs much better on systems with heavy I/O load 1034 - The `--cgroup-manager` flag to `podman` now shows the correct default setting in help if the default was overridden by `libpod.conf` 1035 - For backwards compatibility, setting `--log-driver=json-file` in `podman run` is now supported as an alias for `--log-driver=k8s-file`. This is considered deprecated, and `json-file` will be moved to a new implementation in the future ([#3363](https://github.com/containers/podman/issues/3363)) 1036 - Podman's default `libpod.conf` file now allows the [crun](https://github.com/giuseppe/crun) OCI runtime to be used if it is installed 1037 1038 ## 1.4.2 1039 ### Bugfixes 1040 - Fixed a bug where Podman could not run containers using an older version of Systemd as init ([#3295](https://github.com/containers/podman/issues/3295)) 1041 1042 ### Misc 1043 - Updated vendored Buildah to v1.9.0 to resolve a critical bug with Dockerfile `RUN` instructions 1044 - The error message for running `podman kill` on containers that are not running has been improved 1045 - The Podman remote client can now log to a file if syslog is not available 1046 1047 ## 1.4.1 1048 ### Features 1049 - The `podman exec` command now sets its error code differently based on whether the container does not exist, and the command in the container does not exist 1050 - The `podman inspect` command on containers now outputs Mounts JSON that matches that of `docker inspect`, only including user-specified volumes and differentiating bind mounts and named volumes 1051 - The `podman inspect` command now reports the path to a container's OCI spec with the `OCIConfigPath` key (only included when the container is initialized or running) 1052 - The `podman run --mount` command now supports the `bind-nonrecursive` option for bind mounts ([#3314](https://github.com/containers/podman/issues/3314)) 1053 1054 ### Bugfixes 1055 - Fixed a bug where `podman play kube` would fail to create containers due to an unspecified log driver 1056 - Fixed a bug where Podman would fail to build with [musl libc](https://www.musl-libc.org/) ([#3284](https://github.com/containers/podman/issues/3284)) 1057 - Fixed a bug where rootless Podman using `slirp4netns` networking in an environment with no nameservers on the host other than localhost would result in nonfunctional networking ([#3277](https://github.com/containers/podman/issues/3277)) 1058 - Fixed a bug where `podman import` would not properly set environment variables, discarding their values and retaining only keys 1059 - Fixed a bug where Podman would fail to run when built with Apparmor support but run on systems without the Apparmor kernel module loaded ([#3331](https://github.com/containers/podman/issues/3331)) 1060 1061 ### Misc 1062 - Remote Podman will now default the username it uses to log in to remote systems to the username of the current user 1063 - Podman now uses JSON logging with OCI runtimes that support it, allowing for better error reporting 1064 - Updated vendored Buildah to v1.8.4 1065 - Updated vendored containers/image to v2.0 1066 1067 ## 1.4.0 1068 ### Features 1069 - The `podman checkpoint` and `podman restore` commands can now be used to migrate containers between Podman installations on different systems ([#1618](https://github.com/containers/podman/issues/1618)) 1070 - The `podman cp` command now supports a `pause` flag to pause containers while copying into them 1071 - The remote client now supports a configuration file for pre-configuring connections to remote Podman installations 1072 1073 ### Bugfixes 1074 - Fixed CVE-2019-10152 - The `podman cp` command improperly dereferenced symlinks in host context 1075 - Fixed a bug where `podman commit` could improperly set environment variables that contained `=` characters ([#3132](https://github.com/containers/podman/issues/3132)) 1076 - Fixed a bug where rootless Podman would sometimes fail to start containers with forwarded ports ([#2942](https://github.com/containers/podman/issues/2942)) 1077 - Fixed a bug where `podman version` on the remote client could segfault ([#3145](https://github.com/containers/podman/issues/3145)) 1078 - Fixed a bug where `podman container runlabel` would use `/proc/self/exe` instead of the path of the Podman command when printing the command being executed 1079 - Fixed a bug where filtering images by label did not work ([#3163](https://github.com/containers/podman/issues/3163)) 1080 - Fixed a bug where specifying a bing mount or tmpfs mount over an image volume would cause a container to be unable to start ([#3174](https://github.com/containers/podman/issues/3174)) 1081 - Fixed a bug where `podman generate kube` did not work with containers with named volumes 1082 - Fixed a bug where rootless Podman would receive `permission denied` errors accessing `conmon.pid` ([#3187](https://github.com/containers/podman/issues/3187)) 1083 - Fixed a bug where `podman cp` with a folder specified as target would replace the folder, as opposed to copying into it ([#3184](https://github.com/containers/podman/issues/3184)) 1084 - Fixed a bug where rootless Podman commands could double-unlock a lock, causing a crash ([#3207](https://github.com/containers/podman/issues/3207)) 1085 - Fixed a bug where Podman incorrectly set `tmpcopyup` on `/dev/` mounts, causing errors when using the Kata containers runtime ([#3229](https://github.com/containers/podman/issues/3229)) 1086 - Fixed a bug where `podman exec` would fail on older kernels ([#2968](https://github.com/containers/podman/issues/2968)) 1087 1088 ### Misc 1089 - The `podman inspect` command on containers now uses the `Id` key (instead of `ID`) for the container's ID, for better compatibility with the output of `docker inspect` 1090 - The `podman commit` command is now usable with the Podman remote client 1091 - The `--signature-policy` flag (used with several image-related commands) has been deprecated 1092 - The `podman unshare` command now defines two environment variables in the spawned shell: `CONTAINERS_RUNROOT` and `CONTAINERS_GRAPHROOT`, pointing to temporary and permanent storage for rootless containers 1093 - Updated vendored containers/storage and containers/image libraries with numerous bugfixes 1094 - Updated vendored Buildah to v1.8.3 1095 - Podman now requires [Conmon v0.2.0](https://github.com/containers/conmon/releases/tag/v0.2.0) 1096 - The `podman cp` command is now aliased as `podman container cp` 1097 - Rootless Podman will now default `init_path` using root Podman's configuration files (`/etc/containers/libpod.conf` and `/usr/share/containers/libpod.conf`) if not overridden in the rootless configuration 1098 1099 ## 1.3.1 1100 ### Features 1101 - The `podman cp` command can now read input redirected to `STDIN`, and output to `STDOUT` instead of a file, using `-` instead of an argument. 1102 - The Podman remote client now displays version information from both the client and server in `podman version` 1103 - The `podman unshare` command has been added, allowing easy entry into the user namespace set up by rootless Podman (allowing the removal of files created by rootless Podman, among other things) 1104 1105 ### Bugfixes 1106 - Fixed a bug where Podman containers with the `--rm` flag were removing created volumes when they were automatically removed ([#3071](https://github.com/containers/podman/issues/3071)) 1107 - Fixed a bug where container and pod locks were incorrectly marked as released after a system reboot, causing errors on container and pod removal ([#2900](https://github.com/containers/podman/issues/2900)) 1108 - Fixed a bug where Podman pods could not be removed if any container in the pod encountered an error during removal ([#3088](https://github.com/containers/podman/issues/3088)) 1109 - Fixed a bug where Podman pods run with the `cgroupfs` CGroup driver would encounter a race condition during removal, potentially failing to remove the pod CGroup 1110 - Fixed a bug where the `podman container checkpoint` and `podman container restore` commands were not visible in the remote client 1111 - Fixed a bug where `podman remote ps --ns` would not print the container's namespaces ([#2938](https://github.com/containers/podman/issues/2938)) 1112 - Fixed a bug where removing stopped containers with healthchecks could cause an error 1113 - Fixed a bug where the default `libpod.conf` file was causing parsing errors ([#3095](https://github.com/containers/podman/issues/3095)) 1114 - Fixed a bug where pod locks were not being freed when pods were removed, potentially leading to lock exhaustion 1115 - Fixed a bug where 'podman run' with SD_NOTIFY set could, on short-running containers, create an inconsistent state rendering the container unusable 1116 1117 ### Misc 1118 - The remote Podman client now uses the Varlink bridge to establish remote connections by default 1119 1120 ## 1.3.0 1121 ### Features 1122 - Podman now supports container restart policies! The `--restart` flag on `podman create` and `podman run` allows containers to be restarted after they exit. Please note that Podman cannot restart containers after a system reboot - for that, see our next feature 1123 - Podman `podman generate systemd` command was added to generate systemd unit files for managing Podman containers 1124 - The `podman runlabel` command now allows a `$GLOBAL_OPTS` variable, which will be populated by global options passed to the `podman runlabel` command, allowing custom storage configurations to be passed into containers run with `runlabel` ([#2399](https://github.com/containers/podman/issues/2399)) 1125 - The `podman play kube` command now allows `File` and `FileOrCreate` volumes 1126 - The `podman pod prune` command was added to prune unused pods 1127 - Added the `podman system migrate` command to migrate containers using older configurations to allow their use by newer Libpod versions ([#2935](https://github.com/containers/podman/issues/2935)) 1128 - Podman containers now forward proxy-related environment variables from the host into the container with the `--http-proxy` flag (enabled by default) 1129 - Read-only Podman containers can now create tmpfs filesystems on `/tmp`, `/var/tmp`, and `/run` with the `--read-only-tmpfs` flag (enabled by default) 1130 - The `podman init` command was added, performing all container pre-start tasks without starting the container to allow pre-run debugging 1131 1132 ### Bugfixes 1133 - Fixed a bug where `podman cp` would not copy folders ([#2836](https://github.com/containers/podman/issues/2836)) 1134 - Fixed a bug where Podman would panic when the Varlink API attempted too pull a non-existent image ([#2860](https://github.com/containers/podman/issues/2860)) 1135 - Fixed a bug where `podman rmi` sometimes did not produce an event when images were deleted 1136 - Fixed a bug where Podman would panic when the Varlink API passed improperly-formatted options when attempting to build ([#2869](https://github.com/containers/podman/issues/2869)) 1137 - Fixed a bug where `podman images` would not print a header if no images were present ([#2877](https://github.com/containers/podman/pull/2877)) 1138 - Fixed a bug where the `podman images` command with `--filter dangling=false` would incorrectly print dangling images instead of images which are not dangling ([#2884](https://github.com/containers/podman/issues/2884)) 1139 - Fixed a bug where rootless Podman would panic when any command was run after the system was rebooted ([#2894](https://github.com/containers/podman/issues/2894)) 1140 - Fixed a bug where Podman containers in user namespaces would include undesired directories from the host in `/sys/kernel` 1141 - Fixed a bug where `podman create` would panic when trying to create a container whose name already existed 1142 - Fixed a bug where `podman pull` would exit 0 on failing to pull an image ([#2785](https://github.com/containers/podman/issues/2785)) 1143 - Fixed a bug where `podman pull` would not properly print the cause of errors that occurred ([#2710](https://github.com/containers/podman/issues/2710)) 1144 - Fixed a bug where rootless Podman commands were not properly suspended via `ctrl-z` in a shell ([#2775](https://github.com/containers/podman/issues/2775)) 1145 - Fixed a bug where Podman would error when cleaning up containers when some container mountpoints in `/sys/` were cleaned up already by the closing of the mount namespace 1146 - Fixed a bug where `podman play kube` was not including environment variables from the image run ([#2930](https://github.com/containers/podman/issues/2930)) 1147 - Fixed a bug where `podman play kube` would not properly clean up partially-created pods when encountering an error 1148 - Fixed a bug where `podman commit` with the `--change` flag improperly set `CMD` when a multipart value was provided ([#2951](https://github.com/containers/podman/issues/2951)) 1149 - Fixed a bug where the `--mount` flag to `podman create` and `podman run` did not properly validate its arguments, causing Podman to panic 1150 - Fixed a bug where conflicts between mounts created by the `--mount`, `--volume`, and `--tmpfs` flags were not properly reported 1151 - Fixed a bug where the `--mount` flag could not be used with named volumes 1152 - Fixed a bug where the `--mount` flag did not properly set options for created tmpfs filesystems 1153 - Fixed a bug where rootless Podman could close too many file descriptors, causing Podman to panic ([#2964](https://github.com/containers/podman/issues/2964)) 1154 - Fixed a bug where `podman logout` would not print an error when the login was established by `docker login` ([#2735](https://github.com/containers/podman/issues/2735)) 1155 - Fixed a bug where `podman stop` would error when not all containers were running ([#2993](https://github.com/containers/podman/issues/2993)) 1156 - Fixed a bug where `podman pull` would fail to pull images by shortname if they were not present in the `docker.io` registry 1157 - Fixed a bug where `podman login` would error when credentials were not present if a credential helper was configured ([#1675](https://github.com/containers/podman/issues/1675)) 1158 - Fixed a bug where the `podman system renumber` command and Podman post-reboot state refreshes would not create events 1159 - Fixed a bug where the `podman top` command was not compatible with `docker top` syntax 1160 1161 ### Misc 1162 - Updated vendored Buildah to v1.8.2 1163 - Updated vendored containers/storage to v1.12.6 1164 - Updated vendored containers/psgo to v1.2.1 1165 - Updated to sysregistriesv2, including slight changes to the `registries.conf` config file 1166 - Rootless Podman now places all containers within a single user namespace. This change will not take effect for existing containers until containers are restarted, and containers that are not restarted may not be fully usable 1167 - The `podman run`, `podman create`, `podman start`, `podman restart`, `podman attach`, `podman stop`, `podman port`, `podman rm`, `podman top`, `podman image tree`, `podman generate kube`, `podman umount`, `podman container checkpoint`, and `podman container restore` commands are now available in the remote client 1168 - The Podman remote client now builds on Windows 1169 - A major refactor of volumes created using the `podman volume` command was performed. There should be no major user-facing changes, but downgrading from Podman 1.3 to previous versions may render some volumes unable to be removed. 1170 - The `podman events` command now logs events to journald by default. The old behavior (log to file) can be configured in podman.conf via the `events_logger` option 1171 - The `podman commit` command, in versions 1.2 and earlier, included all volumes mounted into the container as image volumes in the committed image. This behavior was incorrect and has been disabled by default; it can be re-enabled with the `--include-volumes` flag 1172 1173 1174 ## 1.2.0 1175 ### Features 1176 - Podman now supports image healthchecks! The `podman healthcheck run` command was added to manually run healthchecks, and the status of a running healthcheck can be viewed via `podman inspect` 1177 - The `podman events` command was added to show a stream of significant events 1178 - The `podman ps` command now supports a `--watch` flag that will refresh its output on a given interval 1179 - The `podman image tree` command was added to show a tree representation of an image's layers 1180 - The `podman logs` command can now display logs for multiple containers at the same time ([#2219](https://github.com/containers/podman/issues/2219)) 1181 - The `podman exec` command can now pass file descriptors to the process being executed in the container via the `--preserve-fds` option ([#2372](https://github.com/containers/podman/issues/2372)) 1182 - The `podman images` command can now filter images by reference ([#2266](https://github.com/containers/podman/issues/2266)) 1183 - The `podman system df` command was added to show disk usage by Podman 1184 - The `--add-host` option can now be used by containers sharing a network namespace ([#2504](https://github.com/containers/podman/issues/2504)) 1185 - The `podman cp` command now has an `--extract` option to extract the contents of a Tar archive and copy them into the container, instead of copying the archive itself ([#2520](https://github.com/containers/podman/issues/2520)) 1186 - Podman now allows manually specifying the path of the `slirp4netns` binary for rootless networking via the `--network-cmd-path` flag ([#2506](https://github.com/containers/podman/issues/2506)) 1187 - Rootless Podman can now be used with a single UID and GID, without requiring a full 65536 UIDs/GIDs to be allocated in `/etc/subuid` and `/etc/subgid` ([#1651](https://github.com/containers/podman/issues/1651)) 1188 - The `podman runlabel` command now supports the `--replace` option to replace containers using the name requested 1189 - Infrastructure containers for Podman pods will now attempt to use the image's `CMD` and `ENTRYPOINT` instead of a fixed command ([#2182](https://github.com/containers/podman/issues/2182)) 1190 - The `podman play kube` command now supports the `HostPath` and `VolumeMounts` YAML fields ([#2536](https://github.com/containers/podman/issues/2536)) 1191 - Added support to disable creation of `resolv.conf` or `/etc/hosts` in containers by specifying `--dns=none` and `--no-hosts`, respectively, to `podman run` and `podman create` ([#2744](https://github.com/containers/podman/issues/2744)) 1192 - The `podman version` command now supports the `{{ json . }}` template (which outputs JSON) 1193 - Podman can now forward ports using the SCTP protocol 1194 1195 ### Bugfixes 1196 - Fixed a bug where directories could not be passed to `podman run --device` ([#2380](https://github.com/containers/podman/issues/2380)) 1197 - Fixed a bug where rootless Podman with the `--config` flag specified would not use appropriate defaults ([#2510](https://github.com/containers/podman/issues/2510)) 1198 - Fixed a bug where rootless Podman containers using the host network (`--net=host`) would show SELinux as enabled in the container when there were no privileges to use it 1199 - Fixed a bug where importing very large images from `STDIN` could cause Podman to run out of memory 1200 - Fixed a bug where some images would fail to run due to symlinks in paths where Podman would normally mount tmpfs filesystems 1201 - Fixed a bug where `podman play kube` would sometimes segfault ([#2209](https://github.com/containers/podman/issues/2209)) 1202 - Fixed a bug where `podman runlabel` did not respect the `$PWD` variable ([#2171](https://github.com/containers/podman/issues/2171)) 1203 - Fixed a bug where error messages from refreshing the state in rootless Podman were not properly displayed ([#2584](https://github.com/containers/podman/issues/2584)) 1204 - Fixed a bug where rootless `podman build` could not access DNS servers when `slirp4netns` was in use ([#2572](https://github.com/containers/podman/issues/2572)) 1205 - Fixed a bug where rootless `podman stop` and `podman rm` would not work on containers which specified a non-root user ([#2577](https://github.com/containers/podman/issues/2577)) 1206 - Fixed a bug where container labels whose values contained commas were incorrectly parsed and caused errors creating containers ([#2574](https://github.com/containers/podman/issues/2574)) 1207 - Fixed a bug where calling Podman with a nonexistent command would exit 0, instead of with an appropriate error code ([#2530](https://github.com/containers/podman/issues/2530)) 1208 - Fixed a bug where rootless `podman exec` would fail when `--user` was specified ([#2566](https://github.com/containers/podman/issues/2566)) 1209 - Fixed a bug where, when a container had a name that was a fragment of another container's ID, Podman would refuse to operate on the first container by name 1210 - Fixed a bug where `podman pod create` would fail if a pod shared no namespaces but created an infra container 1211 - Fixed a bug where rootless Podman failed on the S390 and CRIS architectures 1212 - Fixed a bug where `podman rm` would exit 0 if no containers specified were found ([#2539](https://github.com/containers/podman/issues/2539)) 1213 - Fixed a bug where `podman run` would fail to enable networking for containers with additional CNI networks specified ([#2795](https://github.com/containers/podman/issues/2795)) 1214 - Fixed a bug where the `podman images` command on the remote client was not displaying digests ([#2756](https://github.com/containers/podman/issues/2756)) 1215 - Fixed a bug where Podman was unable to clean up mounts in containers using user namespaces 1216 - Fixed a bug where `podman image save` would, when told to save to a path that exists, return an error, but still delete the file at the given path 1217 - Fixed a bug where specifying environment variables containing commas with `--env` would cause parsing errors ([#2712](https://github.com/containers/podman/issues/2712)) 1218 - Fixed a bug where `podman umount` would not error if called with no arguments 1219 - Fixed a bug where the user and environment variables specified by the image used in containers created by `podman create kube` was being ignored ([#2665](https://github.com/containers/podman/issues/2665)) 1220 - Fixed a bug where the `podman pod inspect` command would segfault if not given an argument ([#2681](https://github.com/containers/podman/issues/2681)) 1221 - Fixed a bug where rootless `podman pod top` would fail ([#2682](https://github.com/containers/podman/issues/2682)) 1222 - Fixed a bug where the `podman load` command would not error if an input file is not specified and a file was not redirected to `STDIN` 1223 - Fixed a bug where rootless `podman` could fail if global configuration was altered via flag (for example, `--root`, `--runroot`, `--storage-driver`) 1224 - Fixed a bug where forwarded ports that were part of a range (e.g. 20-30) were displayed individually by `podman ps`, as opposed to together as a range ([#1358](https://github.com/containers/podman/issues/1358)) 1225 - Fixed a bug where `podman run --rootfs` could panic ([#2654](https://github.com/containers/podman/issues/2654)) 1226 - Fixed a bug where `podman build` would fail if options were specified after the directory to build ([#2636](https://github.com/containers/podman/issues/2636)) 1227 - Fixed a bug where image volumes made by `podman create` and `podman run` would have incorrect permissions ([#2634](https://github.com/containers/podman/issues/2634)) 1228 - Fixed a bug where rootless containers were not using the containers/image blob cache, leading to slower image pulls 1229 - Fixed a bug where the `podman image inspect` command incorrectly allowed the `--latest`, `--type`, and `--size` options 1230 1231 ### Misc 1232 - Updated Buildah to v1.7.2 1233 - Updated `psgo` library to v1.2, featuring greatly improved safety during concurrent use 1234 - The `podman events` command may not show all activity regarding images, as only Podman was instrumented; images created, deleted, or pulled by CRI-O or Buildah will not be shown in `podman events` 1235 - The `podman pod top` and `podman pod stats` commands are now usable with the Podman remote client 1236 - The `podman kill` and `podman wait` commands are now usable with the Podman remote client 1237 - Removed the unused `restarting` state and mapped `stopped` (also unused) to `exited` in `podman ps --filter status` 1238 - Podman container, pod, and volume names may now contain the `.` (period) character 1239 1240 ## 1.1.2 1241 ### Bugfixes 1242 - Fixed a bug where the `podman image list`, `podman image rm`, and `podman container list` had broken global storage options 1243 - Fixed a bug where the `--label` option to `podman create` and `podman run` was missing the `-l` alias 1244 - Fixed a bug where running Podman with the `--config` flag would not set an appropriate default value for `tmp_dir` ([#2408](https://github.com/containers/podman/issues/2408)) 1245 - Fixed a bug where the `podman logs` command with the `--timestamps` flag produced unreadable output ([#2500](https://github.com/containers/podman/issues/2500)) 1246 - Fixed a bug where the `podman cp` command would automatically extract `.tar` files copied into the container ([#2509](https://github.com/containers/podman/issues/2509)) 1247 1248 ### Misc 1249 - The `podman container stop` command is now usable with the Podman remote client 1250 1251 ## 1.1.1 1252 ### Bugfixes 1253 - Fixed a bug where `podman container restore` was erroneously available as `podman restore` ([#2191](https://github.com/containers/podman/issues/2191)) 1254 - Fixed a bug where the `volume_path` option in `libpod.conf` was not being respected 1255 - Fixed a bug where Podman failed to build when the `varlink` tag was not present ([#2459](https://github.com/containers/podman/issues/2459)) 1256 - Fixed a bug where the `podman image load` command was listed twice in help text 1257 - Fixed a bug where the `podman image sign` command was also listed as `podman sign` 1258 - Fixed a bug where the `podman image list` command incorrectly had an `image` alias 1259 - Fixed a bug where the `podman images` command incorrectly had `ls` and `list` aliases 1260 - Fixed a bug where the `podman image rm` command was being displayed as `podman image rmi` 1261 - Fixed a bug where the `podman create` command would attempt to parse arguments meant for the container 1262 - Fixed a bug where the combination of FIPS mode and user namespaces resulted in permissions errors 1263 - Fixed a bug where the `--time` alias for `--timeout` for the `podman restart` and `podman stop` commands did not function 1264 - Fixed a bug where the default stop timeout for newly-created containers was being set to 0 seconds (resulting in an immediate SIGKILL on running `podman stop`) 1265 - Fixed a bug where the output format of `podman port` was incorrect, printing full container ID instead of truncated ID 1266 - Fixed a bug where the `podman container list` command did not exist 1267 - Fixed a bug where `podman build` could not build a container from images tagged locally that did not exist in a registry ([#2469](https://github.com/containers/podman/issues/2469)) 1268 - Fixed a bug where some Podman commands that accept no arguments would not error when provided arguments 1269 - Fixed a bug where `podman play kube` could not handle cases where a pod and a container shared a name 1270 1271 ### Misc 1272 - Usage text for many commands was greatly improved 1273 - Major cleanups were made to Podman manpages, ensuring that command lists are accurate 1274 - Greatly improved debugging output when the `newuidmap` and `newgidmap` binaries fail when using rootless Podman 1275 - The `-s` alias for the global `--storage-driver` option has been removed 1276 - The `podman container refresh` command has been deprecated, as its intended use case is no longer relevant. The command has been hidden and manpages deleted. It will be removed in a future release 1277 - The `podman container runlabel` command will now pull images not available locally even without the `--pull` option. The `--pull` option has been deprecated 1278 - The `podman container checkpoint` and `podman container restore` commands are now only available on OCI runtimes where they are supported (e.g. `runc`) 1279 1280 ## 1.1.0 1281 ### Features 1282 - Added `--latest` and `--all` flags to `podman mount` and `podman umount` 1283 - Rootless Podman can now forward ports into containers (using the same `-p` and `-P` flags as root Podman) 1284 - Rootless Podman will now pull some configuration options (for example, OCI runtime path) from the default root `libpod.conf` if they are not explicitly set in the user's own `libpod.conf` ([#2174](https://github.com/containers/podman/issues/2174)) 1285 - Added an alias `-f` for the `--format` flag of the `podman info` and `podman version` commands 1286 - Added an alias `-s` for the `--size` flag of the `podman inspect` command 1287 - Added the `podman system info` and `podman system prune` commands 1288 - Added the `podman cp` command to copy files between containers and the host ([#613](https://github.com/containers/podman/issues/613)) 1289 - Added the `--password-stdin` flag to `podman login` 1290 - Added the `--all-tags` flag to `podman pull` 1291 - The `--rm` and `--detach` flags can now be used together with `podman run` 1292 - The `podman start` and `podman run` commands for containers in pods will now start dependency containers if they are stopped 1293 - Added the `podman system renumber` command to handle lock changes 1294 - The `--net=host` and `--dns` flags for `podman run` and `podman create` no longer conflict 1295 - Podman now handles mounting the shared /etc/resolv.conf from network namespaces created by `ip netns add` when they are passed in via `podman run --net=ns:` 1296 1297 ### Bugfixes 1298 - Fixed a bug with `podman inspect` where different information would be returned when the container was running versus when it was stopped 1299 - Fixed a bug where errors in Go templates passed to `podman inspect` were silently ignored instead of reported to the user ([#2159](https://github.com/containers/podman/issues/2159)) 1300 - Fixed a bug where rootless Podman with `--pid=host` containers was incorrectly masking paths in `/proc` 1301 - Fixed a bug where full errors starting rootless `Podman` were not reported when a refresh was requested 1302 - Fixed a bug where Podman would override the config file-specified storage driver with the driver the backing database was created with without warning users 1303 - Fixed a bug where `podman prune` would prune all images not in use by a container, as opposed to only untagged images, by default ([#2192](https://github.com/containers/podman/issues/2192)) 1304 - Fixed a bug where `podman create --quiet` and `podman run --quiet` were not properly suppressing output 1305 - Fixed a bug where the `table` keyword in Go template output of `podman ps` was not working ([#2221](https://github.com/containers/podman/issues/2221)) 1306 - Fixed a bug where `podman inspect` on images pulled by digest would double-print `@sha256` in output when printing digests ([#2086](https://github.com/containers/podman/issues/2086)) 1307 - Fixed a bug where `podman container runlabel` will return a non-0 exit code if the label does not exist 1308 - Fixed a bug where container state was always reset to Created after a reboot ([#1703](https://github.com/containers/podman/issues/1703)) 1309 - Fixed a bug where `/dev/pts` was unconditionally overridden in rootless Podman, which was unnecessary except in very specific cases 1310 - Fixed a bug where Podman run as root was ignoring some options in `/etc/containers/storage.conf` ([#2217](https://github.com/containers/podman/issues/2217)) 1311 - Fixed a bug where Podman cleanup processes were not being given the proper OCI runtime path if a custom one was specified 1312 - Fixed a bug where `podman images --filter dangling=true` would crash if no dangling images were present ([#2246](https://github.com/containers/podman/issues/2246)) 1313 - Fixed a bug where `podman ps --format "{{.Mounts}}"` would not display a container's mounts ([#2238](https://github.com/containers/podman/issues/2238)) 1314 - Fixed a bug where `podman pod stats` was ignoring Go templates specified by `--format` ([#2258](https://github.com/containers/podman/issues/2258)) 1315 - Fixed a bug where `podman generate kube` would fail on containers with `--user` specified ([#2304](https://github.com/containers/podman/issues/2304)) 1316 - Fixed a bug where `podman images` displayed incorrect output for images pulled by digest ([#2175](https://github.com/containers/podman/issues/2175)) 1317 - Fixed a bug where `podman port` and `podman ps` did not properly display ports if the container joined a network namespace from a pod or another container ([#846](https://github.com/containers/podman/issues/846)) 1318 - Fixed a bug where detaching from a container using the detach keys would cause Podman to hang until the container exited 1319 - Fixed a bug where `podman create --rm` did not work with `podman start --attach` 1320 - Fixed a bug where invalid named volumes specified in `podman create` and `podman run` could cause segfaults ([#2301](https://github.com/containers/podman/issues/2301)) 1321 - Fixed a bug where the `runtime` field in `libpod.conf` was being ignored. `runtime` is legacy and deprecated, but will continue to be respected for the foreseeable future 1322 - Fixed a bug where `podman login` would sometimes report it logged in successfully when it did not 1323 - Fixed a bug where `podman pod create` would not error on receiving unused CLI argument 1324 - Fixed a bug where rootless `podman run` with the `--pod` argument would fail if the pod was stopped 1325 - Fixed a bug where `podman images` did not print a trailing newline when not invoked on a TTY ([#2388](https://github.com/containers/podman/issues/2388)) 1326 - Fixed a bug where the `--runtime` option was sometimes not overriding `libpod.conf` 1327 - Fixed a bug where `podman pull` and `podman runlabel` would sometimes exit with 0 when they should have exited with an error ([#2405](https://github.com/containers/podman/issues/2405)) 1328 - Fixed a bug where rootless `podman export -o` would fail ([#2381](https://github.com/containers/podman/issues/2381)) 1329 - Fixed a bug where read-only volumes would fail in rootless Podman when the volume originated on a filesystem mounted `nosuid`, `nodev`, or `noexec` ([#2312](https://github.com/containers/podman/issues/2312)) 1330 - Fixed a bug where some files used by checkpoint and restore received improper SELinux labels ([#2334](https://github.com/containers/podman/issues/2334)) 1331 - Fixed a bug where Podman's volume path was not properly changed when containers/storage changed location ([#2395](https://github.com/containers/podman/issues/2395)) 1332 1333 ### Misc 1334 - Podman migrated to a new, shared memory locking model in this release. As part of this, if you are running Podman with pods or dependency containers (e.g. `--net=container:`), you should run the `podman system renumber` command to migrate your containers to the new model - please reference the `podman-system-renumber(1)` man page for further details 1335 - Podman migrated to a new command-line parsing library, and the output format of help and usage text has somewhat changed as a result 1336 - Updated Buildah to v1.7, picking up a number of bugfixes 1337 - Updated containers/image library to v1.5, picking up a number of bugfixes and performance improvements to pushing images 1338 - Updated containers/storage library to v1.10, picking up a number of bugfixes 1339 - Work on the remote Podman client for interacting with Podman remotely over Varlink is progressing steadily, and many image and pod commands are supported - please see the [Readme](https://github.com/containers/podman/blob/master/remote_client.md) for details 1340 - Added path masking to mounts with the `:z` and `:Z` options, preventing users from accidentally performing an SELinux relabel of their entire home directory 1341 - The `podman container runlabel` command will not pull an image if it does not contain the requested label 1342 - Many commands' usage information now includes examples 1343 - `podman rm` can now delete containers in containers/storage, which can be used to resolve some situations where Podman fails to remove a container 1344 - The `podman search` command now searches multiple registries in parallel for improved performance 1345 - The `podman build` command now defaults `--pull-always` to true 1346 - Containers which share a network namespace (for example, when in a pod) will now share /etc/hosts and /etc/resolv.conf between all containers in the pod, causing changes in one container to propagate to all containers sharing their networks 1347 - The `podman rm` and `podman rmi` commands now return 1 (instead of 127) when all specified container or images are missing 1348 1349 ## 1.0.0 1350 ### Features 1351 - The `podman exec` command now includes a `--workdir` option to set working directory for the executed command 1352 - The `podman create` and `podman run` commands now support the `--init` flag to use a minimal init process in the container 1353 - Added the `podman image sign` command to GPG sign images 1354 - The `podman run --device` flag now accepts directories, and will added any device nodes in the directory to the container 1355 - Added the `podman play kube` command to create pods and containers from Kubernetes pod YAML 1356 1357 ### Bugfixes 1358 - Fixed a bug where passing `podman create` or `podman run` volumes with an empty host or container path could cause a segfault 1359 - Fixed a bug where `storage.conf` was sometimes ignored for rootless containers 1360 - Fixed a bug where Podman run as root would error if CAP_SYS_RESOURCE was not available 1361 - Fixed a bug where Podman would fail to start containers after a system restart due to an out-of-date default Apparmor profile 1362 - Fixed a bug where Podman's bash completions were not working 1363 - Fixed a bug where `podman login` would use existing login credentials even if new credentials were provided 1364 - Fixed a bug where Podman could create some directories with the wrong permissions, breaking containers with user namespaces 1365 - Fixed a bug where `podman runlabel` was not properly setting container names when the `--name` was specified 1366 - Fixed a bug where `podman runlabel` sometimes included extra spaces in command output 1367 - Fixed a bug where `podman commit` was including invalid port numbers in created images when committing containers with published ports 1368 - Fixed a bug where `podman exec` was not honoring the container's environment variables 1369 - Fixed a bug where `podman run --device` would fail when a symlink to a device was specified 1370 - Fixed a bug where `podman build` was not properly picking up OCI runtime paths specified in `libpod.conf` 1371 - Fixed a bug where Podman would mount `/dev/shm` into the container read-only for read-only containers (`/dev/shm` should always be read-write) 1372 - Fixed a bug where Podman would ignore any mount whose container mountpoint was `/dev/shm` 1373 - Fixed a bug where `podman export` did not work with the default `fuse-overlayfs` storage driver 1374 - Fixed a bug where `podman inspect -f '{{ json .Config }}'` on images would not output anything (it now prints the image's config) 1375 - Fixed a bug where `podman rmi -fa` displayed the wrong error message when trying to remove images used by pod infra containers 1376 1377 ### Misc 1378 - Rootless containers now unconditionally use postrun cleanup processes, ensuring resources are freed when the container stops 1379 - A new version of Buildah is included for `podman build`, featuring improved build speed and numerous bugfixes 1380 - Pulling images has been parallelized, allowing individual layers to be pulled in parallel 1381 - The `podman start --attach` command now defaults the `sig-proxy` option to `true`, matching `podman create` and `podman run` 1382 - The `podman info` command now prints the path of the configuration file controlling container storage 1383 - Added `podman list` and `podman ls` as aliases for `podman ps`, and `podman container ps` and `podman container list` as aliases for `podman container ls` 1384 - Changed `podman generate kube` to generate Kubernetes service YAML in the same file as pod YAML, generating a single file instead of two 1385 - To improve compatibility with the Docker command line, `podman inspect -f '{{ json .ContainerConfig }}'` on images is no longer valid; please use `podman inspect -f '{{ json .Config }}'` instead 1386 1387 ## 0.12.1.2 1388 ### Bugfixes 1389 - Fixed a bug where an empty path for named volumes could make it impossible to create containers 1390 - Fixed a bug where containers using another container's network namespace would not also use the other container's /etc/hosts and /etc/resolv.conf 1391 - Fixed a bug where containers with `--rm` which failed to start were not removed 1392 - Fixed a potential race condition attempting to read `/etc/passwd` inside containers 1393 1394 ## 0.12.1.1 1395 ### Features 1396 - Added the `podman generate kube` command to generate Kubernetes Pod and Service YAML for Podman containers and pods 1397 - The `podman pod stop` flag now accepts a `--timeout` flag to set the timeout for stopping containers in the pod 1398 1399 ### Bugfixes 1400 - Fixed a bug where rootless Podman would fail to start if the default OCI hooks directory is not present 1401 1402 ## 0.12.1 1403 ### Features 1404 - Rootless Podman now creates the storage.conf, libpod.conf, and mounts.conf configuration files automatically in `~/.config/containers/` for ease of reconfiguration 1405 - The `podman pod create` command can expose ports in the pod's network namespace, allowing public services to be created in pods 1406 - The `podman container checkpoint` command can now keep containers running after they are checkpointed with the `--leave-running` flag 1407 - The `podman container checkpoint` and `podman container restore` commands now support the `--tcp-established` flag to checkpoint and restore containers with active TCP connections 1408 - The `podman version` command now has a `--format` flag to produce machine-readable output 1409 - Added the `podman container exists`, `podman pod exists`, and `podman image exists` commands to easily check for a container/pod/image, respectively, by name or ID 1410 - The `podman ps --pod` flag now has a short alias, `-p` 1411 - The `podman rmi` and `podman rm` commands now have a `--prune` flag to prune unused images and containers, respectively 1412 - The `podman ps` command now has a `--sync` flag to force a sync of Podman's state against the OCI runtime, resolving some state desync errors 1413 - Added the `podman volume` set of commands for creating and managing local-only named volumes 1414 1415 ### Bugfixes 1416 - Fixed a breaking change in rootless Podman where a change in default paths caused Podman to be unable to function on systems upgraded from 0.10.x or earlier 1417 - Fixed a bug where `podman exec` without `-t` would still use a terminal if the container was created with `-t` 1418 - Fixed a bug where container root propagation was not being properly adjusted if volumes with root propagation set were mounted into the container 1419 - Fixed a bug where `podman exec` could hold the container lock longer than necessary waiting for an exited container 1420 - Fixed a bug where rootless containers using `slirp4netns` for networking were reporting using `bridge` networking in `podman inspect` 1421 - Fixed a bug where `podman container restore -a` was attempting to restore all containers, including created and running ones. It will now only attempt to restore stopped and exited containers 1422 - Fixed a bug where rootless Podman detached containers were not being properly cleaned up 1423 - Fixed a bug where privileged containers were being mounted with incorrect (too restrictive) mount options such as `nodev` 1424 - Fixed a bug where `podman stop` would throw an error attempting to stop a container that had already stopped 1425 - Fixed a bug where `NOTIFY_SOCKET` was not properly being passed into Podman containers 1426 - Fixed a bug where `/dev/shm` was not properly mounted in rootless containers 1427 - Fixed a bug where rootless Podman would set up the CNI plugins for networking (despite not using them in rootless mode), potentially causing `inotify` related errors 1428 - Fixed a bug where Podman would error on numeric GIDs that do not exist in the container's `/etc/group` 1429 - Fixed a bug where containers in pods or created with `--net=container` were not mounting `/etc/resolv.conf` and `/etc/hosts` 1430 1431 ### Misc 1432 - `podman build` now defaults the `--force-rm` flag to `true` 1433 - Improved `podman runlabel` support for labels featuring arguments with whitespace 1434 - Containers without a network namespace will now use the host's `resolv.conf` 1435 - The `slirp4netns` network mode can now be used with containers running as root. It may be useful for container-in-container scenarios where the outer container does not have host networking set 1436 - Podman now uses `inotify` to wait for container exit files to be created, instead of polling. If `inotify` cannot be used, Podman will fall back to polling to check if the file has been created 1437 - The `podman logs` command now uses improved short-options handling, allowing its flags to be combined if desired (for example, `podman logs -lf` instead of `podman logs -l -f`) 1438 - Hardcoded OCI hooks directories used by Podman are now deprecated; they should instead be coded into the `libpod.conf` configuration file. They can be specified as an array via `hooks_dir` 1439 1440 ## 0.11.1.1 1441 ### Bugfixes 1442 - Fixed a bug where Podman was not correctly adding firewall rules for containers, preventing them from accessing the network 1443 - Fixed a bug where full error messages were being lost when creating containers with user namespaces 1444 - Fixed a bug where container state was not properly updated if a failure occurred during network setup, which could cause mounts to be left behind when the container was removed 1445 - Fixed a bug where `podman exec` could time out on slower systems by increasing the relevant timeout 1446 1447 ### Misc 1448 - `podman rm -f` now removes paused containers. As such, `podman rm -af` completing successfully guarantees all Podman containers have been removed 1449 - Added a field to `podman info` to show if Podman is being run as rootless 1450 - Made a small output format change to `podman images` - image sizes now feature a space between number and unit (e.g. `123 MB` now instead of `123MB`) 1451 - Vendored an updated version of `containers/storage` to fix several bugs reported upstream 1452 1453 ## 0.11.1 1454 ### Features 1455 - Added `--all` and `--latest` flags to `podman checkpoint` and `podman restore` 1456 - Added `--max-workers` flag to all Podman commands that support operating in parallel, allowing the maximum number of parallel workers used to be specified 1457 - Added `--all` flag to `podman restart` 1458 1459 ### Bugfixes 1460 - Fixed a bug where `podman port -l` would segfault if no containers were present 1461 - Fixed a bug where `podman stats -a` would error if containers were present but not running 1462 - Fixed a bug where container status checks would sometimes leave zombie OCI runtime processes 1463 - Fixed checkpoint and restore code to verify an appropriate version of `criu` is being used 1464 - Fixed a bug where environment variables with no specified value (e.g. `-e FOO`) caused errors (they are now added as empty) 1465 - Fixed a bug where rootless Podman would attempt to configure the system firewall, causing errors on some systems where iptables is not in the user's PATH 1466 - Fixed a bug where rootless Podman was unable to successfully write the container ID to a file when `--cid-file` was specified to `podman run` 1467 - Fixed a bug where `podman unmount` would refuse to unmount a container if it was running (the unmount will now be deferred until the container stops) 1468 - Fixed a bug where rootless `podman attach` would fail to attach due to a too-long path name 1469 - Fixed a bug where `podman info` was not properly reporting the Git commit Podman was built from 1470 - Fixed a bug where `podman run --interactive` was not holding STDIN open when `-a` flag was specified 1471 - Fixed a bug where Podman with the `cgroupfs` CGroup driver was sometimes not successfully removing pod CGroups 1472 - Fixed a bug where rootless Podman was unable to run systemd containers (note that this also requires an update to systemd) 1473 - Fixed a bug where `podman run` with the `--user` flag would fail if the container image did not contain `/etc/passwd` or `/etc/group` 1474 1475 ### Misc 1476 - `podman rm`, `podman restart`, `podman kill`, `podman pause`, and `podman unpause` now operate in parallel, greatly improving speed when multiple containers are specified 1477 - `podman create`, `podman run`, and `podman ps` have a number of improvements which should greatly increase their speed 1478 - Greatly improved performance and reduced memory utilization of container status checks, which should improve the speed of most Podman commands 1479 - Improve ability of `podman runlabel` to run commands that are not Podman 1480 - Podman containers with an IP address now add their hostnames to `/etc/hosts` 1481 - Changed default location of temporary libpod files in rootless Podman 1482 - Updated the default Podman seccomp profile 1483 1484 ### Compatibility 1485 Several paths related to rootless Podman had their default values changed in this release. 1486 If paths were not hardcoded in libpod.conf, your system may lose track of running containers and believe they are newly-created. 1487 1488 ## 0.10.1.3 1489 ### Bugfixes 1490 - Fixed a bug where `podman build` would not work while any containers were running 1491 1492 ## 0.10.1.2 1493 ### Bugfixes 1494 - Fixed cgroup mount for containers using systemd as init to work properly with the systemd cgroup manager 1495 1496 ## 0.10.1.1 1497 ### Features 1498 - Added handling for running containers as users with numeric UIDs not present in the container's /etc/passwd. This allows getpwuid() to work inside these containers. 1499 - Added support for the REGISTRY_AUTH_FILE environment variable, which specifies the location of credentials for registry login. This is supported by the `push`, `pull`, `login`, `logout`, `runlabel`, and `search` commands 1500 1501 ### Bugfixes 1502 - Fixed handling for image volumes which are mounted on symlinks. The links are now resolved within the container, not on the host 1503 - Fixed mounts for containers that use systemd as init to properly include all mounts required by systemd to function 1504 1505 ### Misc 1506 - Updated vendored version of Buildah used to power `podman build` 1507 1508 ## 0.10.1 1509 ### Features 1510 - Added the `podman container checkpoint` and `podman container restore` commands to checkpoint and restore containers 1511 - Added the `podman container runlabel` command to run containers based on commands contained in their images 1512 - Added the `podman create --ip` and `podman run --ip` flags to allow setting static IPs for containers 1513 - Added the `podman kill --all` flag to send a signal to all running containers 1514 1515 ### Bugfixes 1516 - Fixed Podman cleanup processes for detached containers to properly print debug information when `--syslog` flag is specified 1517 - Fixed manpages for `podman create` and `podman run` to document existing `--net` flag as an alias for `--network` 1518 - Fixed issues with rootless Podman where specifying a single user mapping container was causing all Podman commands to hang 1519 - Fixed an issue with rootless Podman not properly detecting when user namespaces were not enabled 1520 - Fixed an issue where Podman user namespaces were not preserving file capabilities 1521 - Fixed an issue where `resolv.conf` in container would unconditionally forward nameservers into the container, even localhost 1522 - Fixed containers to release resources in the OCI runtime immediately after exiting, improving compatibility with Kata containers 1523 - Fixed OCI runtime handling to fix several issues when using gVisor as an OCI runtime 1524 - Fixed SELinux relabel errors when starting containers after a system restart 1525 - Fixed a crash when initializing hooks on containers running systemd as init 1526 - Fixed an SELinux labelling issue with privileged containers 1527 - Fixed rootless Podman to raise better errors when using CGroup resource limits, which are not currently compatible with rootless 1528 - Fixed a crash when runc was used as the OCI runtime for containers running systemd as init 1529 - Fixed SELinux labelling for containers run with `--security-opt label=disable` to assign the correct label 1530 1531 ### Misc 1532 - Changed flag ordering on all Podman commands to ensure flags are alphabetized 1533 - Changed `podman stop` to work in parallel when multiple containers are specified, greatly speeding up stop for containers that do not stop after SIGINT 1534 - Updated vendored version of Buildah used to power `podman build` 1535 - Added version of vendored Buildah to `podman info` to better debug issues 1536 1537 ## 0.9.3.1 1538 ### Bugfixes 1539 - Fixed a critical issue where SELinux contexts set on tmpfs volumes were causing runc crashes 1540 1541 ## 0.9.3 1542 ### Features 1543 - Added a flag to `libpod.conf`, `label`, to globally enable/disable SELinux labelling for libpod 1544 - Added `--mount` flag to `podman create` and `podman run` as a new, more explicit way of specifying volume mounts 1545 1546 ### Bugfixes 1547 - Fixed a crash during container creation when an image had no names 1548 - Fixed default rootfs mount propagation to for containers to match Docker 1549 - Fixed permissions of `/proc` in containers 1550 - Fixed permissions of some default bind mounts (for example, `/etc/hosts`) in read-only containers 1551 - Fixed `/dev/shm` in `--ipc=container` and `--ipc=host` containers to use the correct SHM 1552 - Fixed rootless Podman to properly join the namespaces of other containers 1553 - Fixed the output of `podman diff` to not display some default changes that will not be committed 1554 - Fixed rootless to better handle cases where insufficient UIDs/GIDs are mapped into the container 1555 1556 ## 0.9.2.1 1557 ### Bugfixes 1558 - Updated Buildah dependency to fix several bugs in `podman build` 1559 1560 ### Misc 1561 - Small performance improvement in image handling code to not recalculate digests 1562 1563 ## 0.9.2 1564 ### Features 1565 - Added `--interval` flag to `podman wait` to determine the interval between checks for container status 1566 - Added a switch in `libpod.conf` to disable reserving ports for running containers. This lowers the safety of port allocations, but can significantly reduce memory usage. 1567 - Added ability to search all the contents of a registry if no image name is specified when using `podman search` 1568 1569 ### Bugfixes 1570 - Further fixes for sharing of UTS namespaces within pods 1571 - Fixed a deadlock in containers/storage that could be caused by numerous parallel Podman processes. 1572 - Fixed Podman running into open file limits when many ports are forwarded 1573 - Fixed default mount propagation on volume mounts 1574 - Fixed default mounts under /dev remaining if /dev is bind-mounted into the container 1575 - Fixed rootless `podman create` with no command specified throwing an error 1576 1577 ### Misc 1578 - Added `podman rm --volumes` flag for compatibility with Docker. As Podman does not presently support named volumes, this does nothing for now, but provides improved compatibility with the Docker command line. 1579 - Improved error messages from `podman pull` 1580 1581 ### Compatibility 1582 - Podman is no longer being built by default with support for the Devicemapper storage driver. If you are using this storage driver, you should investigate switching to overlayfs. 1583 1584 ## 0.9.1.1 1585 ### Bugfixes 1586 - Added support for configuring iptables and firewalld firewalls to allow container traffic. This should resolve numerous issues with network access in containers. 1587 1588 ### Note 1589 It is recommended that you restart your system firewall after installing this release to clear any firewall rules created by older Podman versions. If port forwarding to containers does not work, it is recommended that you restart your system. 1590 1591 ## 0.9.1 1592 ### Features 1593 - Added initial support for the `podman pod` command as non-root 1594 1595 ### Bugfixes 1596 - Fixed regression where invalid Podman commands would still cause a clean exit 1597 - Fixed `podman rmi --all` to not error if no images are present on the system 1598 - Fixed parsing of container logs with `podman logs` to properly handle CRI logging, fixing some issues with blank lines in logs 1599 - Fixed a bug creating pod cgroups using the systemd cgroup driver with systemd versions 239 and higher 1600 - Fixed handling of volume mounts that overlapped with default container mounts (for example, `podman run -v /dev/:/dev`) 1601 - Fixed sharing of UTS namespace in pods 1602 1603 ### Misc 1604 - Added additional debug information when pulling images if `--log-level=debug` is specified 1605 - `podman build` now defaults to caching intermediate layers while building 1606 1607 ## 0.8.5 1608 ### Features 1609 - Added the ability to add a multipart entrypoint with `podman run --entrypoint` 1610 - Improved help text when invalid commands are specified 1611 - Greatly improved support for containers which use systemd as init 1612 1613 ### Bugfixes 1614 - Fixed several bugs with rootless `podman exec` 1615 - Fixed rootless `podman` with a symlinked storage directory crashing 1616 - Fixed bug with `podman ps` and multiple filters where the interface did not match Docker 1617 - Fixed handling of `resolv.conf` on the host to handle symlinks 1618 - Increased open file descriptor and process limits to match Docker and Buildah 1619 - Fixed `podman run -h` to specify the container's hostname (as it does in Docker) instead of printing help text 1620 - Fixed a bug with image shortname handling where repositories were incorrectly being treated as registries 1621 - Fixed a bug where `podman wait` was busywaiting and consuming large amounts of CPU 1622 1623 ## 0.8.4 1624 ### Features 1625 - Added the `podman pod top` command 1626 - Added the ability to easily share namespaces within a pod 1627 - Added a pod statistics endpoint to the Varlink API 1628 - Added information on container capabilities to the output of `podman inspect` 1629 1630 ### Bugfixes 1631 - Fixed a bug with the --device flag in `podman run` and `podman create` 1632 - Fixed `podman pod stats` to accept partial pod IDs and pod names 1633 - Fixed a bug with OCI hooks handling `ALWAYS` matches 1634 - Fixed a bug with privileged rootless containers with `--net=host` set 1635 - Fixed a bug where `podman exec --user` would not work with usernames, only numeric IDs 1636 - Fixed a bug where Podman was forwarding both TCP and UDP ports to containers when protocol was not specified 1637 - Fixed issues with Apparmor in rootless containers 1638 - Fixed an issue with database encoding causing some containers created by Podman versions 0.8.1 and below to be unusable. 1639 1640 ### Compatibility: 1641 We switched JSON encoding/decoding to a new library for this release to address a compatibility issue introduced by v0.8.2. 1642 However, this may cause issues with containers created in 0.8.2 and 0.8.3 with custom DNS servers.