Podman

- Changelog for v0.8.2.1 (2018-08-11)
* Ensure pod inspect is locked and validity-checked
* Swap default CGroup manager from cgroupfs to systemd

- Changelog for v0.8.2 (2018-08-10)
* We need to sort mounts so that one mount does not over mount another.
* search name should include registry
* Split pod.go into 3 files
* Make errors during refresh nonfatal
* Add batch check to container stats lock
* removeContainer: fix deadlock
* Add FFJSON to build container
* Don't require .gopathok for individual FFJSON targets
* Add FFJSON generation to makefile
* Re-add FFJSON for container and pod structs
* Fixed a bug setting dependencies on the wrong container
* Always connect to the stdout and stderr of stream
* apparmor: respect "unconfined" setting
* oci.go: syslog: fix debug formatting
* add podman pod inspect
* Fix ambiguity in adding localhost to podman save
* Fix CGroupFS cgroup manager cgroup creation for pods
* Update Conmon commit for testing
* Pass newly-added --log-level flag to Conmon
* Cleanup man pages
* Improve ps handling of container start/stop time
* rootless: fix user lookup if USER= is not set
* enabled copr epel builds again
* Handle yum and dnf
* Test regressions against the RPM spec file
* Pass DESTDIR down to python Makefile
* Add dpkg support for returning oci/conmon versions
* Have info print conmon/oci runtime information
* Better pull error for fully-qualified images
* Stub varlink pod methods.
* Remove inotify work around
* Rename varlink socket and interface
* Change tarball filename in copr prepare and match short-commit length
* Add Runc and Conmon versions to Podman Version
* update copr spec, lets get it building again
* Add missing dependencies to build system
* Port to MacOS
* Make one runtime for the varlink service
* Bump gitvalidation epoch
* Bump to v0.8.2-dev

- Changelog for v0.8.1 (2018-08-03)
* Vendor in latest github.com/projectatomic/buildah
* Update gitvalidation epoch
* Check for missing arguments in /proc/self/cmdline
* Added ps --pod option
* clarify pull error message
* rootless: do not set setgroups to deny when using newuidmap
* Man page fixes found by https://pagure.io/ManualPageScan
* Inline pullGoalNamesFromPossiblyUnqualifiedName into Runtime.pullGoalFromPossibly...
* Replace getPullRefName by Runtime.getPullRefPair
* Inline pullGoalNamesFromImageReference back into Runtime.pullGoalFromImageReference
* Introduce getSinglePullRefNameGoal
* Test Runtime.pullGoalFromPossiblyUnqualifiedName instead of pullGoalNameFrom...
* Test Runtime.pullGoalFromImageReference instead of pullGoalNamesFromImageReference
* Use REGISTRIES_CONFIG_PATH for all tests
* rootless: do not segfault if the parent already died
* RFC: Rename runtime.pullImage to runtime.pullImageFromHeuristicSource
* Introduce Runtime.pullImageFromReference, call it in Runtime.FromImageReference
* RFC: Remove unused transport name constants from libpod
* Replace Runtime.LoadFromArchive with Runtime.LoadFromArchiveReference
* Rename the "image" variable to "imageName"
* Fix the heuristic for docker-archive: sources in (podman pull)
* Split doPullImage from pullImage
* Remove the forceCompress parameter from getCopyOptions and DRO.GetSystemContext
* Remove the authFile parameter from getCopyOptions and DRO.GetSystemContext
* Remove the signaturePolicyPath parameter from getCopyOptions and DRO.GetSystemContext
* Add a *types.SystemContext parameter to getCopyOptions and DRO.GetSystemContext
* Move pullImage from Image to Runtime
* Do not re-parse the list of search registries just for an error message
* Eliminate duplicate determination whether to use search registries
* Eliminate the "DockerArchive means pull all refPairs" special case
* Introduce struct pullGoalNames
* Introduce struct pullGoal
* Use []pullRefPair instead of []*pullRefPair
* Use []pullRefName instead of []*pullRefName
* Introduce singlePullRefNameGoal
* Use an early return from refNamesFromPossiblyUnqualifiedName
* RFC: Rename Image.PushImage to Image.PushImageToHeuristicDestination
* Remove an unnecessary use of alltransports.ParseImageName
* RFC? Hard-code "format" string values instead of using libpod.* transport names
* Use PushImageToReference for (podman save)
* Call imageNameForSaveDestination while creating the references
* Exit early in the simple case in imageNameForSaveDestination
* Rename parameters of imageNameForSaveDestination
* Split imageNameForSaveDestination from saveCmd
* Split a single if statement into two.
* Move source handling before destination parsing
* Split Image.PushImageToReference from Image.PushImage
* Don't format to string and re-parse a DockerReference()
* Remove the :// end from DockerTransport
* Remove the TransportNames arrays
* Document the properties of DefaultTransport a bit better.
* Eliminate the "dest" variable.
* Use an early exit if a docker-archive: image has no repo tags
* Reorganize the tag loading in DockerArchive case
* Return early in refNamesFromImageReference instead of appending to pullNames
* Use srcRef.StringWithinTransport() instead of parsing imgName again
* Use a switch instead of if/if else/.../else
* Remove the error return value from getPullRefName
* Rename getPullListFromRef to refPairsFromImageReference
* Split refNamesFromImageReference from Runtime.getPullListFromRef
* Replace getPullRefPair with getPullRefName
* Include the rejected reference when parsing it fails in pullRefPairsFromRefNames
* Add --force to podman umount to force the unmounting of the rootfs
* Integration Test Improvements 3
* Ensure container and pod refresh picks up a State
* Fix build on non-linux platforms
* Rework state testing to allow State structs to be empty
* Add additional comments on accessing state in API
* Do not fetch pod and ctr State on retrieval in Bolt
* network: add support for rootless network with slirp4netns
* varlink ImageRemove should always return image ID
* Add documentations on how to setup /etc/subuid and /etc/subgid
* Integration Test Improvements 2
* avoid spewing fds do to restore of cached images
* Add load test for xz compressed images
* Speed up test results
* Show duration for each ginkgo test and test speed improvements
* vendor: update containers/storage
* Clean up pylint warnings and errors for podman
* podman rmi shouldn't delete named referenced images

- Changelog for v0.7.4 (2018-07-27)
* Add pod pause/unpause
* Fix up docker compatibility messages
* Update vendored version of runc,buildah,containers/image
* Refactored method of getting pods
* Fix godoc comment in pkg/netns
* Fix handling of Linux network namespaces
* Update containernetworking/plugins to current master
* Cleanup descriptions and help information
* Skip seccomp-dependent tests on non-Linux
* Use the Linux version BoltState.getContainerFromDB on all platforms.
* Split parseNetNSBoltData from BoltState.getContainerFromDB
* Use testify/require in a few places to avoid panics in tests
* Skip unit tests which require storage when not running as root
* Don't pollute the build output with failures to build checkseccomp
* Remove cmd/podman/user.go
* double papr timeout for all ci tests
* vendor latest containers/psgo
* Vendor latest container/storage to fix overlay mountopt
* Add pod kill
* Added pod restart
* Added pod.Restart() functionality to libpod.
* Add a mutex to BoltDB state to prevent lock issues
* Clear variables used to store options after parsing for every volume
* Clean up pylint warnings and errors
* podman: allow to specify the IPC namespace to join
* podman: allow to specify the UTS namespace to join
* podman: allow to specify the PID namespace to join
* podman: allow to specify the userns to join
* network: support ns: prefix to join existing namespace
* spec: allow container:NAME network mode
* Update comments in BoltDB and In-Memory states
* Add an E2E test to verify basic namespace functionality
* Add libpod namespace to config
* Add missing runtime.go lines to set namespace
* Address first round of review comments
* Set namespace for new pods/containers based on runtime
* Add --namespace flag to Podman
* Update documentation for the State interface
* Ensure pods are part of the set namespace when added
* Enforce namespace checks on container add
* Add tests for state namespacing
* Add namespaces to in memory state
* Untested implementation of namespaced BoltDB access
* Add constraint that dependencies must be in the same ns
* Add namespaces and initial constraints to database
* Add container and pod namespaces to configs
* Fix varlink API usage of psgo
* Update issue template to point build bugs at buildah
* We don't currently support --mac-address
* Vendor in latest containers/psgo code
* Update container Mounted() and Mountpoint() functions
* [WIP] Refactor and simplify python builds
* AppArmor: runtime check if it's enabled on the host
* Add format descriptors infor to podman top
* Fix error handling in pod start/stop.
* docs/podman-top: fix typo and whitespace
* Use the result of reference.Parse when checking for digests.
* Make refNamesFromPossiblyUnqualifiedName independent from Image
* Make Image.HasShaInInputName to an independent local function
* Split createNamesToPull into ref{Names,Pairs}FromPossiblyUnqualifiedName
* Rename local variables in Runtime.pullRefPairsFromRefNames
* Split Runtime.pullRefPairsFromRefNames from Image.createNamesToPull
* Rename nameToPull to pullRefName
* Rename pullStruct to pullRefPair
* Replace optional nameToPull.shaPullName with mandatory dstName
* Introduce nameToPull, move shaPullName in there
* Split normalizeTag from Image.TagImage
* Remove Image.isShortName
* Inline getTags into its only user
* Add unit tests for imageParts
* Add OnBuild and usernamespace test to baseline

- Changelog for v0.7.3 (2018-07-20)
* Update psgo vendor
* Podman load/tag/save prepend localhost when no repository is present
* Pod ps now uses pod.Status()
* Added pod start and stop
* rootless: support a per-user mounts.conf
* secrets: parse only one mounts configuration file
* rootless: allow a per-user registries.conf file
* pull: get registries using the registries pkg
* rootless: allow a per-user storage.conf file
* rootless, docs: document the libpod.conf file used in rootless mode
* Let containers/storage keep track of mounts
* podman-top: use containers/psgo
* Vendor in latest code for storage,image, buildah
* Abort a test on nil containers, so that future tests don't panic
* Fix TestPostDeleteHooks on macOS
* Use `...` for a regexp constant to improve readability
* oci: keep exposed ports busy and leak the fd into conmon
* Dockerfile: install nmap-ncat
* Update podman_tutorial.md
* Update transfer.md
* Add missing podman commands
* Update gitvalidation epoch
* Fix ps filter with key=value labels
* rootless: require subids to be present
* Downgrade setup.py
* Bump gitvalidation epoch
* Bump to v0.7.3-dev

- Changelog for v0.7.2 (2018-07-13)
* Change logic for detecting conflicting flags in ps
* Update python directories to better support setup.py
* Fix ps --sort=size test
* remote python client for podman
* Only print container size JSON if --size was requested
* Don't print rootfs and rw sizes if they're empty
* Major fixes to podman ps --format=json output
* Ignore running containers in ps exit-code filters
* Record whether the container has exited
* rootless: correctly propagate the exit status from the container
* rootless: unshare mount namespace
* Need to wait for container to exit before completing run/start completes
* If proxy fails then then signal should be sent to the main process
* fix pull image that includes a sha
* Added full podman pod ps, with tests and man page
* Podman pod create/rm commands with man page and tests.
* Added created time to pod state
* Support multiple networks
* Log all output of logrus to syslog as well as stdout/stderr
* podman rmi should only untag image if parent of another
* Changed container status of Unknown from being printed as Dead to Error in Ps
* Fix podman build completions
* Refactor attach()/start() after podman changes
* create conmon sockets when getting their paths
* build: enable ostree in containers/storage when available
* podman/libpod: add default AppArmor profile
* runtime: delete unused function
* rootless: propagate errors from GetRootlessRuntimeDir()
* rootless: resolve the user home directory
* rootless: fix when argv[0] is not an absolute path
* Allow Init() on stopped containers
* urfave/cli: fix regression in short-opts parsing
* Add --volumes-from flag to podman run and create
* Vendor in latest buildah to add masks for /proc/keys and /proc/acpi
* Vendor in latest containers/storage
* Mask /proc/keys to protect information leak about keys on host
* ctime: Drop 32-/64-bit distinction on Linux
* Podman stats with no containers listed is the same as podman stats --all
* Refactor unittest for change in history API
* Bump gitvalidation epoch
* Bump to v0.7.2-dev