1
0
mirror of https://github.com/containers/bootc.git synced 2026-02-05 15:45:53 +01:00
Commit Graph

3333 Commits

Author SHA1 Message Date
John Eckersberg
b06d75fed7 Merge pull request #1340 from cgwalters/release
Release 1.3.0
v1.3.0
2025-05-29 12:14:34 -04:00
Colin Walters
b746eeaa98 Merge pull request #1339 from champtar/repro
ostree-ext: make OCI history reproducible
2025-05-29 11:14:36 -04:00
Colin Walters
85e2585ca3 Release 1.3.0
Mostly bugfixes here, but a few smaller features.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-29 11:10:54 -04:00
Etienne Champetier
20bf08689e ostree-ext: make OCI history reproducible
OciDir push_layer() calls push_layer_full() with
created = chrono::offset::Utc::now()

Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2025-05-29 08:06:58 -04:00
Etienne Champetier
9698500302 Move try_deserialize_timestamp to bootc_utils
Signed-off-by: Etienne Champetier <e.champetier@ateme.com>
2025-05-29 08:06:58 -04:00
Joseph Marrero Corchado
c582017335 Merge pull request #1337 from cgwalters/no-canon-cstorage
spec: Don't canonicalize containers-storage
2025-05-28 09:53:38 -04:00
Colin Walters
31b4ff695e spec: Don't canonicalize containers-storage
Our parser here doesn't handle complex cases that may specify
c/storage options, as used by bootc-image-builder for example.

Closes: https://github.com/bootc-dev/bootc/issues/1308
2025-05-28 08:42:27 -04:00
Colin Walters
51123abdf0 Merge pull request #1324 from cgwalters/lint-truncate
lints: Add --no-truncate flag to bootc container lint
2025-05-27 13:30:52 -04:00
Joseph Marrero Corchado
2445e8d987 Merge pull request #1332 from cgwalters/sysusers-fix
sysusers: Various fixes
2025-05-27 13:27:40 -04:00
Colin Walters
5aa6d80ed8 Merge pull request #1336 from jeckersb/export_container-once
ostree-ext: tests: Don't call export_container twice
2025-05-27 12:40:46 -04:00
John Eckersberg
9a72816e15 Merge pull request #1334 from cgwalters/add-cncf-slack
README.md: Add link to CNCF slack
2025-05-27 12:15:09 -04:00
John Eckersberg
b03053a1a6 Merge branch 'main' into add-cncf-slack 2025-05-27 11:44:31 -04:00
John Eckersberg
9f80696d70 ostree-ext: tests: Don't call export_container twice
Just something weird I noticed when looking at #1328

Signed-off-by: John Eckersberg <jeckersb@redhat.com>
2025-05-27 11:35:58 -04:00
Colin Walters
69d570231e Merge pull request #1328 from cgwalters/silence-selinux
main: Silence SELinux
2025-05-27 11:32:30 -04:00
Colin Walters
ee49808999 README.md: Add link to CNCF slack
I recently added this because there's a need for a development-focused
sync chat instance and the CNCF Slack makes sense alongside
other CNCF projects.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-27 11:20:54 -04:00
Colin Walters
5961d29514 sysusers: Parse more truncated entries
This isn't mentioned in the docs, but the tooling
will happily accept missing GECOS or even the uid field
for users.

xref https://github.com/bootc-dev/bootc/issues/1331

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-26 21:03:34 -04:00
Colin Walters
bd317c3b60 sysusers: Also verify parsing of other entry types
xref https://github.com/bootc-dev/bootc/issues/1331
2025-05-26 20:45:34 -04:00
Colin Walters
6da8c2f063 sysusers: Parse path references too
These are uncommon, but valid.

xref: https://github.com/bootc-dev/bootc/issues/1331
Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-26 20:39:24 -04:00
Colin Walters
ab827f5b8c sysusers: Parse 'u!'
This was added in newer systemd.

xref: https://github.com/bootc-dev/bootc/issues/1331
Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-26 20:39:24 -04:00
Colin Walters
7f0e3a56d4 main: Silence SELinux
Like https://github.com/coreos/rpm-ostree/pull/5352

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-22 19:40:55 -04:00
Colin Walters
cbbd34543f Merge pull request #1326 from jeckersb/semver
README.md: Add versioning/semver standards
2025-05-22 17:15:21 -04:00
John Eckersberg
dff1a87319 README.md: Add versioning/semver standards
Signed-off-by: John Eckersberg <jeckersb@redhat.com>
2025-05-22 10:57:08 -04:00
Colin Walters
08b383f1ac Merge pull request #1325 from jeckersb/move-from-containers-org
Rewrite containers org links to bootc-dev org
2025-05-22 09:42:29 -04:00
John Eckersberg
ca7b38f699 Rewrite containers org links to bootc-dev org
Literally just find and replace github.com/containers/bootc with
github.com/bootc-dev/bootc

We have the redirect in place so none of this is really important, but
I figure removing as many instances of the old repo and replacing them
with the current can't hurt for things like search engine
optimization.  Plus some non-zero number of people might assume one is
a fork of the other or something.

Signed-off-by: John Eckersberg <jeckersb@redhat.com>
2025-05-22 09:07:36 -04:00
Colin Walters
12fd41b3cf Merge pull request #1323 from cgwalters/minor
docs: Fix typos and clarify content
2025-05-22 08:23:04 -04:00
Colin Walters
840a2350f6 lints: Add --no-truncate flag to bootc container lint
Useful when running automatic reports and analyses
where all issues need to be visible at once without truncation.

To do this we needed to add a LintExecutionConfig to
propagate configuration through the lint system.

Also, refactor how we print things so there's a
shared helper functions for consistent formatting with and without truncation.

Closes: https://github.com/bootc-dev/bootc/issues/1260

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-17 17:23:07 -04:00
Colin Walters
ee78dbc553 Tweak iterator filtering
Prep for lint truncation improvement.

- Kill the handling of the "max 0" case, it's pathological; this
  requires passing NonZeroUsize
- Drop the requirement for the iterator to be clonable as it
  improves ergonomics, and return a vector of the collected elements
  instead

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-17 14:26:02 -04:00
Xiaofeng Wang
90f2b996f4 Merge pull request #1295 from cgwalters/rework-containerfile
hack: Rework+cleanup container build
2025-05-17 20:56:35 +08:00
Colin Walters
59232f0635 docs: Fix typos and clarify content
Especially fix the intro and note that bootc's APIs are stable.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-16 20:47:29 -04:00
Colin Walters
635af16a27 Merge pull request #1322 from cgwalters/sepolicy-filter
Dedup sepolicy handling
2025-05-15 15:46:03 -04:00
Colin Walters
f4a175d6b5 Merge pull request #1285 from rsturla/readonly-pinning
feat(status): display pinned deployments
2025-05-15 15:45:46 -04:00
Colin Walters
c53f7bfb85 Dedup sepolicy handling
For historical reasons the ostree sepolicy API can exist as a
no-op even if it didn't find a policy, one has to query `.csum()`
or `.name()` to verify it's present.

In our code just map that case to None.

Followup to 99d30dfd55
to ensure we consistently handle this case.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-15 14:49:35 -04:00
Robert Sturla
5358fda895 feat(status): display pinned deployments
Part of #904

Displays pinned deployments as part of "bootc status".
Includes unit tests to ensure correct parsing of the
pinned deployments, and that they are displayed in
human readable formats correctly.

Signed-off-by: Robert Sturla <robertsturla@outlook.com>
2025-05-15 18:44:02 +01:00
Colin Walters
009e1bf2d6 hack: Rework+cleanup container build
Main motivation: I was looking at making more changes here

- Use an idiom I'd like to standardize more of copy context to `FROM scratch` image
  which is then mounted and consumed in other phases by mounting. This helps
  avoid polluting later containers with intermediate copied files.
- Change `build.sh` to handle being run from any directory
- Drop the `dev-rootfs` stuff as it's weird and awkward; instead we should
  encourage multi-step builds deriving from this image
- Don't make `bootc.tar.zst` only to immediately untar it; just use `COPY`
  from the build container
- Use heredocs to condense multiple `RUN` invocations to avoid pointless
  small layers

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-15 13:29:38 -04:00
Colin Walters
2367f5251e ci: Update podman on fedora-container-tests too
So we can use heredocs.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-15 13:27:23 -04:00
Colin Walters
5c1cb06408 Merge pull request #1321 from ckyrouac/selinux-storage-fix
install: Fallback to no sepolicy when init imgstore
2025-05-15 12:54:44 -04:00
ckyrouac
99d30dfd55 install: Fallback to no sepolicy when init imgstore
Check for the policy csum to make sure there is actually a policy
available to lookup when trying to label the bootc container storage.

Fixes #1303

Signed-off-by: ckyrouac <ckyrouac@redhat.com>
2025-05-15 12:01:54 -04:00
Chris Kyrouac
ba65dd2947 Merge pull request #1318 from cgwalters/minor-unused
ostree-ext: Squash some unused warnings
2025-05-15 08:57:04 -04:00
Chris Kyrouac
9e76badf7b Merge pull request #1319 from cgwalters/status-stateroot
spec: Add stateroot
2025-05-15 08:54:32 -04:00
Colin Walters
d71855d516 spec: Add stateroot
As we head towards factory reset work, this will be of critical
importance.

For now this only shows up in the API, not in human readable
status.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-14 21:28:21 -04:00
Colin Walters
3d93701f5a Merge pull request #1299 from ckyrouac/reinstall-mount-warning
Reinstall mount warning
2025-05-14 17:47:25 -04:00
Colin Walters
9e1d9eb9d1 ostree-ext: Squash some unused warnings
In some cases rust-analyzer seems to be building without the `bootc`
feature which triggers some unused variable warnings here.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-14 17:41:08 -04:00
John Eckersberg
233e24bbb9 Merge pull request #1317 from cgwalters/release
Release 1.2.0
v1.2.0
2025-05-14 17:11:44 -04:00
ckyrouac
118dcedf22 reinstall: Add warnings about mounts
This uses findmnt to locate filesystem mounts that are on the same
source as the root mount. If any are found, the user is warned these
filesystems will persist unmounted in the bootc system. The user must
hit <enter> to proceed.

This does the same for logical volumes in the same group as root.

It also adds a generic warning to help the user understand what will
happen after rebooting into the bootc system.

Signed-off-by: ckyrouac <ckyrouac@redhat.com>
2025-05-14 14:25:06 -04:00
Colin Walters
3ea65580b8 Release 1.2.0
Signed-off-by: Colin Walters <walters@verbum.org>
2025-05-14 14:08:26 -04:00
ckyrouac
2082741b0a mount: Make path optional in run_findmnt
This allows retrieving all mounts.

Signed-off-by: ckyrouac <ckyrouac@redhat.com>
2025-05-14 10:35:12 -04:00
Colin Walters
c1d67aa07c Merge pull request #1315 from cgwalters/doc-initramfs-transient
filesystem: Note initramfs reneneration is required for prepare-root
2025-05-13 10:17:57 -04:00
Colin Walters
c33202e7a6 filesystem: Note initramfs reneneration is required for prepare-root
Ref https://gitlab.com/fedora/bootc/examples/-/merge_requests/59#note_2500726902
2025-05-13 11:33:02 +00:00
Colin Walters
8f1e871c3d Merge pull request #1313 from ckyrouac/reinstall-old-fix
reinstall: Only add --cleanup when bootc version >= 1.1.8
2025-05-12 18:27:06 -04:00
ckyrouac
0ec300ebe1 reinstall: Only add --cleanup when the feature is available in the image
fixes #1312

Signed-off-by: ckyrouac <ckyrouac@redhat.com>
2025-05-12 17:40:31 -04:00