Features
- Rootless Podman will now add an entry to
/etc/passwdfor the user who ran Podman if run with--userns=keep-id. - The
podman system connectioncommand has been reworked to support multiple connections, and reenabled for use! - Podman now has a new global flag,
--connection, to specify a connection to a remote Podman API instance.
Changes
- Podman's automatic systemd integration (activated by the
--systemd=trueflag, set by default) will now activate for containers using/usr/local/sbin/initas their command, instead of just/usr/sbin/initand/sbin/init(and any path ending insystemd). - Seccomp profiles specified by the
--security-opt seccomp=...flag topodman createandpodman runwill now be honored even if the container was created using--privileged.
Bugfixes
- Fixed a bug where the
podman play kubewould not honor thehostIPfield for port forwarding (#5964). - Fixed a bug where the
podman generate systemdcommand would panic on an invalid restart policy being specified (#7271). - Fixed a bug where the
podman imagescommand could take a very long time (several minutes) to complete when a large number of images were present. - Fixed a bug where the
podman logscommand with the--tailflag would not work properly when a large amount of output would be printed ((#7230)[https://github.com//issues/7230]). - Fixed a bug where the
podman execcommand with remote Podman would not return a non-zero exit code when the exec session failed to start (e.g. invoking a non-existent command) (#6893). - Fixed a bug where the
podman loadcommand with remote Podman would did not honor user-specified tags (#7124). - Fixed a bug where the
podman system servicecommand, when run as a non-root user by Systemd, did not properly handle the Podman pause process and would not restart properly as a result (#7180). - Fixed a bug where the
--publishflag topodman create,podman run, andpodman pod createdid not properly handle a host IP of 0.0.0.0 (attempting to bind to literal 0.0.0.0, instead of all IPs on the system) (#7104). - Fixed a bug where the
podman start --attachcommand would not print the container's exit code when the command exited due to the container exiting. - Fixed a bug where the
podman rmcommand with remote Podman would not remove volumes, even if the--volumesflag was specified (#7128). - Fixed a bug where the
podman runcommand with remote Podman and the--rmflag could exit before the container was fully removed. - Fixed a bug where the
--pod new:...flag topodman runandpodman createwould create a pod that did not share any namespaces. - Fixed a bug where the
--preserve-fdsflag topodman runandpodman execcould close the wrong file descriptors while trying to close user-provided descriptors after passing them into the container. - Fixed a bug where default environment variables (
$PATHand$TERM) were not set in containers when not provided by the image. - Fixed a bug where pod infra containers were not properly unmounted after exiting.
- Fixed a bug where networks created with
podman network createwith an IPv6 subnet did not properly set an IPv6 default route. - Fixed a bug where the
podman savecommand would not work properly when its output was piped to another command (#7017). - Fixed a bug where containers using a systemd init on a cgroups v1 system could leak mounts under
/sys/fs/cgroup/systemdto the host. - Fixed a bug where
podman buildwould not generate an event on completion (#7022). - Fixed a bug where the
podman historycommand with remote Podman printed incorrect creation times for layers (#7122). - Fixed a bug where Podman would not create working directories specified by the container image if they did not exist.
- Fixed a bug where Podman did not clear
CMDfrom the container image if the user overrodeENTRYPOINT(#7115). - Fixed a bug where error parsing image names were not fully reported (part of the error message containing the exact issue was dropped).
- Fixed a bug where the
podman imagescommand with remote Podman did not support printing image tags in Go templates supplied to the--formatflag (#7123). - Fixed a bug where the
podman rmi --forcecommand would not attempt to unmount containers it was removing, which could cause a failure to remove the image. - Fixed a bug where the
podman generate systemd --newcommand could incorrectly quote arguments to Podman that contained whitespace, leading to nonfunctional unit files (#7285). - Fixed a bug where the
podman versioncommand did not properly include build time and Git commit. - Fixed a bug where running systemd in a Podman container on a system that did not use the
systemdcgroup manager would fail (#6734). - Fixed a bug where capabilities from
--cap-addwere not properly added when a container was started as a non-root user via--user. - Fixed a bug where Pod infra containers were not properly cleaned up when they stopped, causing networking issues (#7103).
API
- Fixed a bug where the libpod and compat Build endpoints did not accept the
application/tarcontent type (instead only acceptingapplication/x-tar) (#7185). - Fixed a bug where the libpod Exists endpoint would attempt to write a second header in some error conditions (#7197).
- Fixed a bug where compat and libpod Network Inspect and Network Remove endpoints would return a 500 instead of 404 when the requested network was not found.
- Added a versioned
_pingendpoint (e.g.http://localhost/v1.40/_ping). - Fixed a bug where containers started through a systemd-managed instance of the REST API would be shut down when
podman system serviceshut down due to its idle timeout (#7294). - Added stronger parameter verification for the libpod Network Create endpoint to ensure subnet mask is a valid value.
- The
PodURL parameter to the Libpod Container List endpoint has been deprecated; the information previously gated by thePodboolean will now be included in the response unconditionally.
Misc
- Updated Buildah to v1.15.1
- Updated containers/image library to v5.5.2