Daniel J Walsh

Should verify that the max value is not too big

11

When parsing the ulimit, we should check if the ulimit max value is greater then the processes max value. If yes then we should return an error. Signed-off-by: Daniel J...

Vendor in containers/(storage, common)

8

#### Does this PR introduce a user-facing change? ```release-note None ```

Ignore failure to ignore thinpool keys

4

Fixes: https://github.com/containers/podman/issues/22473

Potential improvement over Naive Diff, from Email conversation.

5

>> Hi Miklos, >> >> Can you elaborate a bit more on what docker/container-storage and do >> here to expedite image generation with redirect_dir/metacopy enabled. >> >> They can't pack...

Podman needs Volume: /var/lib/containers/storage to work.

7

When running a bootc image as an OCI contianer, embeded containers will fail. This is because OSTree on OSTree is not allower. Defaulting i /var/lib/containers/storage to a Volume fixes the...

Newuidmap and newgidmap do not have file capabiltiies set in centos-bootc image.

2

In my Containerfile I had to execute rpm --setcaps shadow-utils To fix the problem. We have seen similar problems with file caps missing in fedora images.

podman run quay.io/centos-bootc/centos-bootc:stream9 rpm -qV shadow-utils | grep /usr/bin/new.*map .......TP /usr/bin/newgidmap .......TP /usr/bin/newuidmap If you do a RUN rpm --setcaps shadow-utils It fixes the issue. I think the tooling that...

Bluechi daemon fails when run in a rootless container with --network=host

6

## Describe the bug Please enter a clear and concise description of what the bug is. ## To Reproduce Please provide the steps to reproduce the issue. $ podman run...