v1.1.0

1.1.0

Features

• Added --latest and --all flags to podman mount and podman umount
• Rootless Podman can now forward ports into containers (using the same -p and -P flags as root Podman)
• Rootless Podman will now pull some configuration options (for example, OCI runtime path) from the default root libpod.conf if they are not explicitly set in the user's own libpod.conf (#2174)
• Added an alias -f for the --format flag of the podman info and podman version commands
• Added an alias -s for the --size flag of the podman inspect command
• Added the podman system info and podman system prune commands
• Added the podman cp command to copy files between containers and the host (#613)
• Added the --password-stdin flag to podman login
• Added the --all-tags flag to podman pull
• The --rm and --detach flags can now be used together with podman run
• The podman start and podman run commands for containers in pods will now start dependency containers if they are stopped
• Added the podman system renumber command to handle lock changes
• The --net=host and --dns flags for podman run and podman create no longer conflict
• Podman now handles mounting the shared /etc/resolv.conf from network namespaces created by ip netns add when they are passed in via podman run --net=ns:

Bugfixes

• Fixed a bug with podman inspect where different information would be returned when the container was running versus when it was stopped
• Fixed a bug where errors in Go templates passed to podman inspect were silently ignored instead of reported to the user (#2159)
• Fixed a bug where rootless Podman with --pid=host containers was incorrectly masking paths in /proc
• Fixed a bug where full errors starting rootless Podman were not reported when a refresh was requested
• Fixed a bug where Podman would override the config file-specified storage driver with the driver the backing database was created with without warning users
• Fixed a bug where podman prune would prune all images not in use by a container, as opposed to only untagged images, by default (#2192)
• Fixed a bug where podman create --quiet and podman run --quiet were not properly suppressing output
• Fixed a bug where the table keyword in Go template output of podman ps was not working (#2221)
• Fixed a bug where podman inspect on images pulled by digest would double-print @sha256 in output when printing digests (#2086)
• Fixed a bug where podman container runlabel will return a non-0 exit code if the label does not exist
• Fixed a bug where container state was always reset to Created after a reboot (#1703)
• Fixed a bug where /dev/pts was unconditionally overridden in rootless Podman, which was unnecessary except in very specific cases
• Fixed a bug where Podman run as root was ignoring some options in /etc/containers/storage.conf (#2217)
• Fixed a bug where Podman cleanup processes were not being given the proper OCI runtime path if a custom one was specified
• Fixed a bug where podman images --filter dangling=true would crash if no dangling images were present (#2246)
• Fixed a bug where podman ps --format "{{.Mounts}}" would not display a container's mounts (#2238)
• Fixed a bug where podman pod stats was ignoring Go templates specified by --format (#2258)
• Fixed a bug where podman generate kube would fail on containers with --user specified (#2304)
• Fixed a bug where podman images displayed incorrect output for images pulled by digest (#2175)
• Fixed a bug where podman port and podman ps did not properly display ports if the container joined a network namespace from a pod or another container (#846)
• Fixed a bug where detaching from a container using the detach keys would cause Podman to hang until the container exited
• Fixed a bug where podman create --rm did not work with podman start --attach
• Fixed a bug where invalid named volumes specified in podman create and podman run could cause segfaults (#2301)
• Fixed a bug where the runtime field in libpod.conf was being ignored. runtime is legacy and deprecated, but will continue to be respected for the forseeable future
• Fixed a bug where podman login would sometimes report it logged in successfully when it did not
• Fixed a bug where podman pod create would not error on receiving unused CLI argument
• Fixed a bug where rootless podman run with the --pod argument would fail if the pod was stopped
• Fixed a bug where podman images did not print a trailing newline when not invoked on a TTY (#2388)
• Fixed a bug where the --runtime option was sometimes not overriding libpod.conf
• Fixed a bug where podman pull and podman runlabel would sometimes exit with 0 when they should have exited with an error (#2405)
• Fixed a bug where rootless podman export -o would fail (#2381)
• Fixed a bug where read-only volumes would fail in rootless Podman when the volume originated on a filesystem mounted nosuid, nodev, or noexec (#2312)
• Fixed a bug where some files used by checkpoint and restore received improper SELinux labels (#2334)
• Fixed a bug where Podman's volume path was not properly changed when containers/storage changed location (#2395)

Misc

• Podman migrated to a new, shared memory locking model in this release. As part of this, if you are running Podman with pods or dependency containers (e.g. --net=container:), you should run the podman system renumber command to migrate your containers to the new model - pleas
  e reference the podman-system-renumber(1) man page for further details
• Podman migrated to a new command-line parsing library, and the output format of help and usage text has somewhat changed as a result
• Updated Buildah to v1.7, picking up a number of bugfixes
• Updated containers/image library to v1.5, picking up a number of bugfixes and performance improvements to pushing images
• Updated containers/storage library to v1.10, picking up a number of bugfixes
• Work on the remote Podman client for interacting with Podman remotely over Varlink is progressing steadily, and many image and pod commands are supported
• Added path masking to mounts with the :z and :Z options, preventing users from accidentally performing an SELinux relabel of their entire home directory
• The podman container runlabel command will not pull an image if it does not contain the requested label
• Many commands' usage information now includes examples
• podman rm can now delete containers in containers/storage, which can be used to resolve some situations where Podman fails to remove a container
• The podman search command now searches multiple registries in parallel for improved performance
• The podman build command now defaults --pull-always to true
• Containers which share a network namespace (for example, when in a pod) will now share /etc/hosts and /etc/resolv.conf between all containers in the pod, causing changes in one container to propogate to all containers sharing their networks
• The podman rm and podman rmi commands now return 1 (instead of 127) when all specified container or images are missing