February 2026 - Podman - Podman List Archives

Podman Community Cabal Meeting, Tues, Mar 3, 2026, 11:00 a.m. EST (UTC-5)
by Tom Sweeney 25 Feb '26

25 Feb '26

Hey All! On Tuesday, March 3, 2026, at 11:00 a.m. EST (UTC-5), just 6 days from now, we will hold the Podman Community Cabal meeting. At the moment, the agenda is wide open for your topics! Please add one, and hope to see you there! https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?both Video link is included in the agenda. Best Wishes, t

1 0

systemd failed to install eBPF device on Centos 10
by lejeczek 23 Feb '26

23 Feb '26

Hi guys. I've only migrated, in-place, Centos 9 to 10, yep, non-standard & not supported technique but, in case it's no steaming from this "migration" and is a separate issue; I cannot create/run a container, I try like this: rootfull container, first start/creation -> $ { export _DOM=mine.priv _H=ipa-dzien _IP=10.2.1.202; _NAME="freeipa.${_DOM}".c9s; export _PATH=/devs/ROOTFUL.containers/${_NAME}; echo; mkdir -p ${_PATH}/{,root,data}; }; podman run -ti --tz=local --cap-add=CAP_SYS_TIME --add-host=${_H}.${_DOM}:${_IP} --network=off-host-1021 --ip=${_IP} --volume=${_PATH}/root:/root:z --volume=${_PATH}/data:/data:z --volume=${_PATH}/etc_resolv.conf:/etc/resolv.conf:z --volume=${_PATH}/etc_hosts:/etc/hosts:z --hostname ${_H}.${_DOM} --name ${_NAME} localhost/freeipa-server-c9s Error: OCI runtime error: crun: systemd failed to install eBPF device filter on cgroup `/sys/fs/cgroup/machine.slice/libpod-ca3a11932a1106278ee01571b53346a766d53f6df54784590962193706d2e7cb.scope` This still works in Centos 9 - I'm hoping that I'm missing something which is new (to me) in Centos 10 - would you know what this might be? I see SELinux denials - I have fcontext labesls for this custom mount points - making SE permissive allow container to start. selinux back to enforcing: -> $ podman container restart freeipa.mine.priv.c9s WARN[0010] StopSignal (37) failed to stop container freeipa.mine.priv.c9s in 10 seconds, resorting to SIGKILL Error: container create failed (no logs from conmon): conmon bytes "": readObjectStart: expect { or n, but found , error found in #0 byte of ...||..., bigger context ...||... but before tampering with SE I thought I'd ask. many thanks, L.

1 0

Podman v5.8.0 Released
by container.tools.ci＠gmail.com 12 Feb '26

12 Feb '26

Hi all, Podman v5.8.0 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.8.0 Release Notes: -------------- ### Features - The `podman quadlet install` command can now install files which contain multiple separate Quadlet files. The files must be separated with a `---` delimeter on a new line, and each section must begin with a `# FileName=<name>` line to name the new Quadlet ([#27384](https://github.com/containers/podman/pull/27384)). - Quadlet `.container` files now support a new key, `AppArmor`, for configuring the container's AppArmor profile ([#27095](https://github.com/containers/podman/issues/27095)). - When running the `podman artifact add` command against a `podman machine` VM, if the path being loaded or built is shared into the VM, Podman will load it from the VM's filesystem instead of streaming the data through the REST API, improving performance ([#26321](https://github.com/containers/podman/issues/26321)). - The `podman update` command now features a new option, `--ulimit`, to update container ulimits ([#26381](https://github.com/containers/podman/issues/26381)). - The `podman exec` command now features a new option, `--no-session`, which disables tracking of the exec session to improve performance and startup time ([#26588](https://github.com/containers/podman/issues/26588)). ### Changes - Podman will now automatically attempt to migrate legacy BoltDB databases to SQLite when the system reboots. This is necessary as support for BoltDB will be removed in Podman 6.0 in May. If automatic migration is not possible, a new option, `podman system migrate --migrate-db`, will manually force a migration. - The `podman secret create -` command no longer requires that the secret be provided through a pipe, and instead allows typing the secret through the terminal ([#27879](https://github.com/containers/podman/issues/27879)). ### Bugfixes - Fixed a bug where containers created by `podman play kube` with a healthcheck using the `initialDelaySeconds` option would run healthchecks before the initial delay had expired ([#27678](https://github.com/containers/podman/issues/27678)). - Fixed a bug where healthchecks would sometimes fail to execute due to systemd rate limits. - Fixed a bug where the `podman export` command would emit a `Mount` event instead of an `Export` event. - Fixed a bug where the `podman kube play` command incorrectly handled precedence between environment variables set by both the `envFrom` and `env` fields ([#27287](https://github.com/containers/podman/issues/27287)). - Fixed a bug where the `podman kube play` command would panic when parsing Pod YAML missing the `image` field ([#27784](https://github.com/containers/podman/issues/27784)). - Fixed a bug where the `podman volume mount` command returned empty paths when volumes were handled by a plugin driver ([#27858](https://github.com/containers/podman/issues/27858)). - Fixed a bug where containers created with `--rootfs` instead of from an image would show that they had a healthcheck in the `starting` state even if no healthcheck was defined ([#27651](https://github.com/containers/podman/issues/27651)). - Fixed a bug where the `podman build` command's `--pull=newer` option did not function correctly ([#22845](https://github.com/containers/podman/issues/22845)). - Fixed a bug where the `RequiresMountsFor` field in Quadlet `.container` files incorrectly handled bind-mount paths which contained spaces. - Fixed a bug where the remote Podman client's `podman run --detach-keys` option did not accept an empty string (IE, no detach keys) ([#27414](https://github.com/containers/podman/issues/27414)). - Fixed a bug where the remove Podman client's `podman build --secret ... env=VAR` option would incorrectly try to read the environment variable on the server side, instead of from the client ([#27494](https://github.com/containers/podman/issues/27494)). - Fixed a bug where the `podman artifact push` and `podman artifact pull` commands ignored authentication credentials given by the `--authfile` option ([#27421](https://github.com/containers/podman/issues/27421)). - Fixed a bug where Windows paths were incorrectly handled under some circumstances when using the HyperV machine provider ([#27571](https://github.com/containers/podman/issues/27571)). - Fixed a bug where the `podman run --pod-id-file` option was not properly validated, allowing the creation of containers in pods with improper user namespace configuration ([#26848](https://github.com/containers/podman/issues/26848)). ### API - Added new APIs for interacting with Quadlets, including `GET /libpod/quadlets/{name}/file` (print contents of a Quadlet file), `GET /libpod/quadlets/{name}/exists` (check if the given Quadlet exists), `POST /libpod/quadlets` (install one or more Quadlets), `DELETE /libpod/quadlets` (remove one or more Quadlets), and `DELETE /libpod/quadlets/{name}` (remove a single Quadlet). - Fixed a bug where the Compat and Libpod Logs endpoints for Containers did not use nanosecond-level precision for reported timestamps ([#27961](https://github.com/containers/podman/issues/27691)). - Fixed a bug where the Compat Create endpoint for Containers incorrectly handled healthcheck commands with arguments containing spaces ([#26519](https://github.com/containers/podman/issues/26519)). - Fixed a bug where the Compat Remove endpoint for Secrets was misnamed as `DELETE /secret/{name}` instead of `DELETE /secrets/{name}` ([#27548](https://github.com/containers/podman/issues/27548)). ### Misc - Updated Buildah to v1.43.0 - Updated the containers/storage library v1.62.0 - Updated the containers/image library to v5.39.1 - Updated the containers/common library to v0.67.0

1 0

Podman candidate v5.8.0-rc1 Released
by container.tools.ci＠gmail.com 10 Feb '26

10 Feb '26

Hi all, Podman candidate v5.8.0-rc1 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.8.0-rc1 Release candidate Notes: -------------- ### Features - The `podman quadlet install` command can now install files which contain multiple separate Quadlet files. The files must be separated with a `---` delimeter on a new line, and each section must begin with a `# FileName=<name>` line to name the new Quadlet ([#27384](https://github.com/containers/podman/pull/27384)). - Quadlet `.container` files now support a new key, `AppArmor`, for configuring the container's AppArmor profile ([#27095](https://github.com/containers/podman/issues/27095)). - When running the `podman artifact add` command against a `podman machine` VM, if the path being loaded or built is shared into the VM, Podman will load it from the VM's filesystem instead of streaming the data through the REST API, improving performance ([#26321](https://github.com/containers/podman/issues/26321)). - The `podman update` command now features a new option, `--ulimit`, to update container ulimits ([#26381](https://github.com/containers/podman/issues/26381)). - The `podman exec` command now features a new option, `--no-session`, which disables tracking of the exec session to improve performance and startup time ([#26588](https://github.com/containers/podman/issues/26588)). ### Changes - The `podman secret create -` command no longer requires that the secret be provided through a pipe, and instead allows typing the secret through the terminal ([#27879](https://github.com/containers/podman/issues/27879)). ### Bugfixes - Fixed a bug where containers created by `podman play kube` with a healthcheck using the `initialDelaySeconds` option would run healthchecks before the initial delay had expired ([#27678](https://github.com/containers/podman/issues/27678)). - Fixed a bug where healthchecks would sometimes fail to execute due to systemd rate limits. - Fixed a bug where the `podman export` command would emit a `Mount` event instead of an `Export` event. - Fixed a bug where the `podman kube play` command incorrectly handled precedence between environment variables set by both the `envFrom` and `env` fields ([#27287](https://github.com/containers/podman/issues/27287)). - Fixed a bug where the `podman kube play` command would panic when parsing Pod YAML missing the `image` field ([#27784](https://github.com/containers/podman/issues/27784)). - Fixed a bug where the `podman volume mount` command returned empty paths when volumes were handled by a plugin driver ([#27858](https://github.com/containers/podman/issues/27858)). - Fixed a bug where containers created with `--rootfs` instead of from an image would show that they had a healthcheck in the `starting` state even if no healthcheck was defined ([#27651](https://github.com/containers/podman/issues/27651)). - Fixed a bug where the `podman build` command's `--pull=newer` option did not function correctly ([#22845](https://github.com/containers/podman/issues/22845)). - Fixed a bug where the `RequiresMountsFor` field in Quadlet `.container` files incorrectly handled bind-mount paths which contained spaces. - Fixed a bug where the remote Podman client's `podman run --detach-keys` option did not accept an empty string (IE, no detach keys) ([#27414](https://github.com/containers/podman/issues/27414)). - Fixed a bug where the remove Podman client's `podman build --secret ... env=VAR` option would incorrectly try to read the environment variable on the server side, instead of from the client ([#27494](https://github.com/containers/podman/issues/27494)). - Fixed a bug where the `podman artifact push` and `podman artifact pull` commands ignored authentication credentials given by the `--authfile` option ([#27421](https://github.com/containers/podman/issues/27421)). - Fixed a bug where Windows paths were incorrectly handled under some circumstances when using the HyperV machine provider ([#27571](https://github.com/containers/podman/issues/27571)). - Fixed a bug where the `podman run --pod-id-file` option was not properly validated, allowing the creation of containers in pods with improper user namespace configuration ([#26848](https://github.com/containers/podman/issues/26848)). ### API - Added new APIs for interacting with Quadlets, including `GET /libpod/quadlets/{name}/file` (print contents of a Quadlet file), `GET /libpod/quadlets/{name}/exists` (check if the given Quadlet exists), `POST /libpod/quadlets` (install one or more Quadlets), `DELETE /libpod/quadlets` (remove one or more Quadlets), and `DELETE /libpod/quadlets/{name}` (remove a single Quadlet). - Fixed a bug where the Compat and Libpod Logs endpoints for Containers did not use nanosecond-level precision for reported timestamps ([#27961](https://github.com/containers/podman/issues/27691)). - Fixed a bug where the Compat Create endpoint for Containers incorrectly handled healthcheck commands with arguments containing spaces ([#26519](https://github.com/containers/podman/issues/26519)). - Fixed a bug where the Compat Remove endpoint for Secrets was misnamed as `DELETE /secret/{name}` instead of `DELETE /secrets/{name}` ([#27548](https://github.com/containers/podman/issues/27548)).

1 0

Podman AI-Generated Development Policy RFC!
by Tom Sweeney 05 Feb '26

05 Feb '26

Hi All, The Podman team is cobbling together a policy for handling AI-generated development work. We'd love to hear your thoughts in the document that we're using to create the policy! https://docs.google.com/document/d/1VxYDXT3kIiBAFJHY4fsyFRrddtgIKCrFt_juI7o… If you have problem accessing the document, or want to comment outside of it, please contact Jan Kaluza who is cc'd in this message. t

2 1