Features
- Added support for Sigstore signatures (
sigstoreSigned) to thepodman image trust setandpodman image trust showcommands.` - The
podman image trust showcommand now recognizes newlookasidefield names. - The
podman image trust showcommand now recognizeskeyPathsinsignedByentries.
Changes
- BREAKING CHANGE:
podman image trust showmay now show multiple entries for the same scope, to better represent separate requirements. GPG IDs on a single row now always represent alternative keys, only one of which is required; if multiple sets of keys are required, each is re
presented by a single line. - The
podman generate kubecommand no longer adds thebind-mount-optionsannotation to generated Service YAML (#15208).
Bugfixes
- Fixed a bug where Podman could deadlock when using
podman killto send signals to containers (#15492). - Fixed a bug where the
podman image trust setcommand would silently discard unknown fields. - Fixed a bug where the
podman image trust showcommand would not show signature enforcement configuration for the default scope. - Fixed a bug where the
podman image trust showcommand would silently ignore multiple kinds of requirements in a single scope. - Fixed a bug where a typo in the
podman-kube@.serviceunit file would cause warnings when runningsystemctl statuson the unit. - Fixed a bug where the
--compressoption topodman image savewas incorrectly allowed with theoci-dirformat. - Fixed a bug where the
podman container clonecommand did not properly clone environment variables (#15242). - Fixed a bug where Podman would not accept environment variables with whitespace in their keys (#15251).
- Fixed a bug where Podman would not accept file paths containing the
:character, preventing some commands from being used withpodman machineon Windows (#15247). - Fixed a bug where the
podman topcommand would report new capabilities as unknown. - Fixed a bug where running Podman in a container could cause fatal errors about an inability to create cgroups (#15498).
- Fixed a bug where the
podman generate kubecommand could generate incorrect YAML when thebind-mount-optionswas used (#15170). - Fixed a bug where generated container names were deterministic, instead of random (#15569).
- Fixed a bug where the
podman eventscommand would not work with custom--formatspecifiers (#15648).
API
- Fixed a bug where the Compat List endpoint for Containers did not sort the
HostConfig.Bindsfield as Docker does. - Fixed a bug where the Compat List endpoint for Containers send the name (instead of ID) of the image the container was based on.
- Fixed a bug where the Compat Connect endpoint for Networks would return an error (instead of 200) when attempting to connect a container to a network it was already connected to (#15499).
- Fixed a bug where the Compat Events endpoint set an incorrect status for image removal events (
removeinstead ofdelete) (#15485).