containers-common-1-5.el9
- update to the new vendored components - Related: #2000051 Signed-off-by: Jindrich Novy <jnovy@redhat.com>
This commit is contained in:
Jindrich Novy
parent
456bc5ddac
commit
a868b9af5e
|
|
@ -6,14 +6,14 @@
|
|||
%global skopeo_branch main
|
||||
%global podman_branch main
|
||||
%global image_branch v5.16.0
|
||||
%global common_branch v0.43.2
|
||||
%global storage_branch v1.35.0
|
||||
%global common_branch v0.45.0
|
||||
%global storage_branch v1.36.0
|
||||
%global shortnames_branch main
|
||||
|
||||
Epoch: 2
|
||||
Name: containers-common
|
||||
Version: 1
|
||||
Release: 4%{?dist}
|
||||
Release: 5%{?dist}
|
||||
Summary: Common configuration and documentation for containers
|
||||
License: ASL 2.0
|
||||
BuildArch: noarch
|
||||
|
|
@ -161,6 +161,10 @@ EOF
|
|||
%{_datadir}/rhel/secrets/*
|
||||
|
||||
%changelog
|
||||
* Fri Sep 24 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-5
|
||||
- update to the new vendored components
|
||||
- Related: #2000051
|
||||
|
||||
* Fri Sep 10 2021 Jindrich Novy <jnovy@redhat.com> - 2:1-4
|
||||
- fix updating scripts
|
||||
- Related: #2000051
|
||||
|
|
|
|||
|
|
@ -263,7 +263,13 @@ default_sysctls = [
|
|||
|
||||
# Path to directory where CNI plugin binaries are located.
|
||||
#
|
||||
#cni_plugin_dirs = ["/usr/libexec/cni"]
|
||||
#cni_plugin_dirs = [
|
||||
# "/usr/local/libexec/cni",
|
||||
# "/usr/libexec/cni",
|
||||
# "/usr/local/lib/cni",
|
||||
# "/usr/lib/cni",
|
||||
# "/opt/cni/bin",
|
||||
#]
|
||||
|
||||
# The network name of the default CNI network to attach pods to.
|
||||
#
|
||||
|
|
@ -337,6 +343,15 @@ default_sysctls = [
|
|||
#events_logger = "journald"
|
||||
events_logger = "file"
|
||||
|
||||
# A is a list of directories which are used to search for helper binaries.
|
||||
#
|
||||
#helper_binaries_dir = [
|
||||
# "/usr/local/libexec/podman",
|
||||
# "/usr/local/lib/podman",
|
||||
# "/usr/libexec/podman",
|
||||
# "/usr/lib/podman",
|
||||
#]
|
||||
|
||||
# Path to OCI hooks directories for automatically executed hooks.
|
||||
#
|
||||
#hooks_dir = [
|
||||
|
|
@ -410,7 +425,7 @@ infra_image = "registry.access.redhat.com/ubi9/pause"
|
|||
# Default options to pass to the slirp4netns binary.
|
||||
# For example "allow_host_loopback=true"
|
||||
#
|
||||
#network_cmd_options = []
|
||||
#network_cmd_options = ["enable_ipv6=true",]
|
||||
|
||||
# Whether to use chroot instead of pivot_root in the runtime
|
||||
#
|
||||
|
|
@ -440,15 +455,25 @@ runtime = "crun"
|
|||
# List of the OCI runtimes that support --format=json. When json is supported
|
||||
# engine will use it for reporting nicer errors.
|
||||
#
|
||||
#runtime_supports_json = ["crun", "runc", "kata", "runsc"]
|
||||
#runtime_supports_json = ["crun", "runc", "kata", "runsc", "krun"]
|
||||
|
||||
# List of the OCI runtimes that supports running containers with KVM Separation.
|
||||
#
|
||||
#runtime_supports_kvm = ["kata"]
|
||||
#runtime_supports_kvm = ["kata", "krun"]
|
||||
|
||||
# List of the OCI runtimes that supports running containers without cgroups.
|
||||
#
|
||||
#runtime_supports_nocgroups = ["crun"]
|
||||
#runtime_supports_nocgroups = ["crun", "krun"]
|
||||
|
||||
# Default location for storing temporary container image content. Can be overridden with the TMPDIR environment
|
||||
# variable. If you specify "storage", then the location of the
|
||||
# container/storage tmp directory will be used.
|
||||
# image_copy_tmp_dir="/var/tmp"
|
||||
|
||||
# Number of seconds to wait without a connection
|
||||
# before the `podman system service` times out and exits
|
||||
#
|
||||
#service_timeout = 5
|
||||
|
||||
# Directory for persistent engine files (database, etc)
|
||||
# By default, this will be configured relative to where the containers/storage
|
||||
|
|
@ -487,7 +512,7 @@ runtime = "crun"
|
|||
#
|
||||
#volume_path = "/var/lib/containers/storage/volumes"
|
||||
|
||||
# Paths to look for a valid OCI runtime (crun, runc, kata, runsc, etc)
|
||||
# Paths to look for a valid OCI runtime (crun, runc, kata, runsc, krun, etc)
|
||||
[engine.runtimes]
|
||||
#crun = [
|
||||
# "/usr/bin/crun",
|
||||
|
|
@ -530,6 +555,11 @@ runtime = "crun"
|
|||
# "/run/current-system/sw/bin/runsc",
|
||||
#]
|
||||
|
||||
#krun = [
|
||||
# "/usr/bin/krun",
|
||||
# "/usr/local/bin/krun",
|
||||
#]
|
||||
|
||||
[engine.volume_plugins]
|
||||
#testplugin = "/run/podman/plugins/test.sock"
|
||||
|
||||
|
|
|
|||
|
|
@ -1,4 +1,4 @@
|
|||
% containers.conf(5) Container engine configuration file
|
||||
% containers.conf 5 Container engine configuration file
|
||||
|
||||
# NAME
|
||||
containers.conf - The container engine configuration file specifies default
|
||||
|
|
@ -279,10 +279,21 @@ Options are:
|
|||
The `network` table contains settings pertaining to the management of CNI
|
||||
plugins.
|
||||
|
||||
**cni_plugin_dirs**=["/opt/cni/bin/",]
|
||||
**cni_plugin_dirs**=[]
|
||||
|
||||
List of paths to directories where CNI plugin binaries are located.
|
||||
|
||||
The default list is:
|
||||
```
|
||||
cni_plugin_dirs = [
|
||||
"/usr/local/libexec/cni",
|
||||
"/usr/libexec/cni",
|
||||
"/usr/local/lib/cni",
|
||||
"/usr/lib/cni",
|
||||
"/opt/cni/bin",
|
||||
]
|
||||
```
|
||||
|
||||
**default_network**="podman"
|
||||
|
||||
The network name of the default CNI network to attach pods to.
|
||||
|
|
@ -367,6 +378,29 @@ if you want to set environment variables for the container.
|
|||
Default method to use when logging events.
|
||||
Valid values: `file`, `journald`, and `none`.
|
||||
|
||||
**helper_binaries_dir**=["/usr/libexec/podman", ...]
|
||||
|
||||
A is a list of directories which are used to search for helper binaries.
|
||||
|
||||
The default paths on Linux are:
|
||||
- `/usr/local/libexec/podman`
|
||||
- `/usr/local/lib/podman`
|
||||
- `/usr/libexec/podman`
|
||||
- `/usr/lib/podman`
|
||||
|
||||
The default paths on macOS are:
|
||||
- `/usr/local/opt/podman/libexec`
|
||||
- `/opt/homebrew/bin`
|
||||
- `/opt/homebrew/opt/podman/libexec`
|
||||
- `/usr/local/bin`
|
||||
- `/usr/local/libexec/podman`
|
||||
- `/usr/local/lib/podman`
|
||||
- `/usr/libexec/podman`
|
||||
- `/usr/lib/podman`
|
||||
|
||||
The default path on Windows is:
|
||||
- `C:\Program Files\RedHat\Podman`
|
||||
|
||||
**hooks_dir**=["/etc/containers/oci/hooks.d", ...]
|
||||
|
||||
Path to the OCI hooks directories for automatically executed hooks.
|
||||
|
|
@ -433,11 +467,23 @@ and pods are visible.
|
|||
|
||||
Path to the slirp4netns binary.
|
||||
|
||||
**network_cmd_options**=[]
|
||||
**network_cmd_options**=["enable_ipv6=true",]
|
||||
|
||||
Default options to pass to the slirp4netns binary.
|
||||
|
||||
Example "allow_host_loopback=true"
|
||||
Valid options values are:
|
||||
|
||||
- **allow_host_loopback=true|false**: Allow the slirp4netns to reach the host loopback IP (`10.0.2.2`, which is added to `/etc/hosts` as `host.containers.internal` for your convenience). Default is false.
|
||||
- **mtu=MTU**: Specify the MTU to use for this network. (Default is `65520`).
|
||||
- **cidr=CIDR**: Specify ip range to use for this network. (Default is `10.0.2.0/24`).
|
||||
- **enable_ipv6=true|false**: Enable IPv6. Default is false. (Required for `outbound_addr6`).
|
||||
- **outbound_addr=INTERFACE**: Specify the outbound interface slirp should bind to (ipv4 traffic only).
|
||||
- **outbound_addr=IPv4**: Specify the outbound ipv4 address slirp should bind to.
|
||||
- **outbound_addr6=INTERFACE**: Specify the outbound interface slirp should bind to (ipv6 traffic only).
|
||||
- **outbound_addr6=IPv6**: Specify the outbound ipv6 address slirp should bind to.
|
||||
- **port_handler=rootlesskit**: Use rootlesskit for port forwarding. Default.
|
||||
Note: Rootlesskit changes the source IP address of incoming packets to a IP address in the container network namespace, usually `10.0.2.100`. If your application requires the real source IP address, e.g. web server logs, use the slirp4netns port handler. The rootlesskit port handler is also used for rootless containers when connected to user-defined networks.
|
||||
- **port_handler=slirp4netns**: Use the slirp4netns port forwarding, it is slower than rootlesskit but preserves the correct source IP address. This port handler cannot be used for user-defined networks.
|
||||
|
||||
**no_pivot_root**=false
|
||||
|
||||
|
|
@ -468,18 +514,31 @@ Default OCI specific runtime in runtimes that will be used by default. Must
|
|||
refer to a member of the runtimes table. Default runtime will be searched for
|
||||
on the system using the priority: "crun", "runc", "kata".
|
||||
|
||||
**runtime_supports_json**=["crun", "runc", "kata", "runsc"]
|
||||
**runtime_supports_json**=["crun", "runc", "kata", "runsc", "krun"]
|
||||
|
||||
The list of the OCI runtimes that support `--format=json`.
|
||||
|
||||
**runtime_supports_kvm**=["kata"]
|
||||
**runtime_supports_kvm**=["kata", "krun"]
|
||||
|
||||
The list of OCI runtimes that support running containers with KVM separation.
|
||||
|
||||
**runtime_supports_nocgroups**=["crun"]
|
||||
**runtime_supports_nocgroups**=["crun", "krun"]
|
||||
|
||||
The list of OCI runtimes that support running containers without CGroups.
|
||||
|
||||
**image_copy_tmp_dir**="/var/tmp"
|
||||
|
||||
Default location for storing temporary container image content. Can be
|
||||
overridden with the TMPDIR environment variable. If you specify "storage", then
|
||||
the location of the container/storage tmp directory will be used. If set then it
|
||||
is the users responsibility to cleanup storage. Configure tmpfiles.d(5) to
|
||||
cleanup storage.
|
||||
|
||||
**service_timeout**=**5**
|
||||
|
||||
Number of seconds to wait without a connection before the
|
||||
`podman system service` times out and exits
|
||||
|
||||
**static_dir**="/var/lib/containers/storage/libpod"
|
||||
|
||||
Directory for persistent libpod files (database, etc).
|
||||
|
|
@ -575,6 +634,6 @@ is used for the storage.conf file rather than the default.
|
|||
This is primarily used for testing.
|
||||
|
||||
# SEE ALSO
|
||||
containers-storage.conf(5), containers-policy.json(5), containers-registries.conf(5)
|
||||
containers-storage.conf(5), containers-policy.json(5), containers-registries.conf(5), tmpfiles.d(5)
|
||||
|
||||
[toml]: https://github.com/toml-lang/toml
|
||||
|
|
|
|||
Loading…
Reference in New Issue