- Podman - Podman List Archives

Podman v5.8.2 Released
by container.tools.ci＠gmail.com 14 Apr '26

14 Apr '26

Hi all, Podman v5.8.2 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.8.2 Release Notes: -------------- ### Security - This release addresses CVE-2026-33414, where the `podman machine init --image` command when run on Windows using the Hyper-V backend can run Powershell-escaped commands from the user-specified image path on in a Powershell session on the host ([GHSA-hc8w-h2mf-hp59](https://github.com/containers/podman/security/advisori…) ### Bugfixes - Fixed a bug where containers with the `unless-stopped` restart policy would not restart after a reboot when `podman-restart.service` was enabled ([#28152](https://github.com/containers/podman/issues/28152)). - Fixed a bug where setting `Entrypoint=""` in a Quadlet `.container` file did not clear the container's entrypoint ([#28213](https://github.com/containers/podman/issues/28213)). - Fixed a bug where setting a `HealthCmd` in a Quadlet `.container` file to a command that included double-quotes (`"`) would result in a nonfunctional healthcheck due to a parsing issue ([#28409](https://github.com/containers/podman/issues/28409)). - Fixed a bug where FreeBSD systems could panic when inspecting containers created with the `host` network mode ([#28289](https://github.com/containers/podman/issues/28289)). ### API - Fixed a bug where the Libpod System Check endpoint could perform operations with bad data after returning a 400 error ([#28350](https://github.com/containers/podman/issues/28350)). - Fixed a bug where the remote attach API for containers (Libpod & Compat) could panic due to a rare race condition ([#28277](https://github.com/containers/podman/issues/28277)). - Fixed a bug where the Secret Create API could not create functional secrets using the `shell` driver due to options from the default driver being improperly added. ### Misc - Updated Buildah to v1.43.1 - Updated the containers/common library to v0.67.1 - Updated the containers/image library to v5.39.2

1 0

mount loop ?
by lejeczek 23 Mar '26

23 Mar '26

Hi guys. I'm trying to /mount/ inside a rootfull container but I fail: -> $ mount /_forISOsToImport/CentOS-Stream-10-latest-x86_64-dvd1.iso /mnt/ -o loop mount: /mnt/: mount failed: Operation not permitted. Am I missing something obvious from container config, perhaps some *capabiities*? many thanks, L.

2 1

Podman v5.8.1 Released
by container.tools.ci＠gmail.com 11 Mar '26

11 Mar '26

Hi all, Podman v5.8.1 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.8.1 Release Notes: -------------- ### Bugfixes - Fixed a critical bug where automatic migration from BoltDB to SQLite after a reboot could perform a partial migration, with some containers in SQLite and some remaining in BoltDB, when Quadlets were in use ([#28215](https://github.com/containers/podman/issues/28216)). For those who encountered this bug with 5.8.0 there is no way to automatically recover. If you do not have persistent containers/pods/volumes (i.e. all containers are run using Quadlets) then the easiest option is to move the `db.sql` file in Podman's storage directory to `db.sql.bak` (or similar) and reboot again with v5.8.1 to attempt another migration. Please contact the maintainers with any issues during migration and we will assist as able.

1 0

Podman Community Cabal Meeting, Tues, Mar 3, 2026, 11:00 a.m. EST (UTC-5)
by Tom Sweeney 25 Feb '26

25 Feb '26

Hey All! On Tuesday, March 3, 2026, at 11:00 a.m. EST (UTC-5), just 6 days from now, we will hold the Podman Community Cabal meeting. At the moment, the agenda is wide open for your topics! Please add one, and hope to see you there! https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?both Video link is included in the agenda. Best Wishes, t

1 0

systemd failed to install eBPF device on Centos 10
by lejeczek 23 Feb '26

23 Feb '26

Hi guys. I've only migrated, in-place, Centos 9 to 10, yep, non-standard & not supported technique but, in case it's no steaming from this "migration" and is a separate issue; I cannot create/run a container, I try like this: rootfull container, first start/creation -> $ { export _DOM=mine.priv _H=ipa-dzien _IP=10.2.1.202; _NAME="freeipa.${_DOM}".c9s; export _PATH=/devs/ROOTFUL.containers/${_NAME}; echo; mkdir -p ${_PATH}/{,root,data}; }; podman run -ti --tz=local --cap-add=CAP_SYS_TIME --add-host=${_H}.${_DOM}:${_IP} --network=off-host-1021 --ip=${_IP} --volume=${_PATH}/root:/root:z --volume=${_PATH}/data:/data:z --volume=${_PATH}/etc_resolv.conf:/etc/resolv.conf:z --volume=${_PATH}/etc_hosts:/etc/hosts:z --hostname ${_H}.${_DOM} --name ${_NAME} localhost/freeipa-server-c9s Error: OCI runtime error: crun: systemd failed to install eBPF device filter on cgroup `/sys/fs/cgroup/machine.slice/libpod-ca3a11932a1106278ee01571b53346a766d53f6df54784590962193706d2e7cb.scope` This still works in Centos 9 - I'm hoping that I'm missing something which is new (to me) in Centos 10 - would you know what this might be? I see SELinux denials - I have fcontext labesls for this custom mount points - making SE permissive allow container to start. selinux back to enforcing: -> $ podman container restart freeipa.mine.priv.c9s WARN[0010] StopSignal (37) failed to stop container freeipa.mine.priv.c9s in 10 seconds, resorting to SIGKILL Error: container create failed (no logs from conmon): conmon bytes "": readObjectStart: expect { or n, but found , error found in #0 byte of ...||..., bigger context ...||... but before tampering with SE I thought I'd ask. many thanks, L.

1 0

Podman v5.8.0 Released
by container.tools.ci＠gmail.com 12 Feb '26

12 Feb '26

Hi all, Podman v5.8.0 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.8.0 Release Notes: -------------- ### Features - The `podman quadlet install` command can now install files which contain multiple separate Quadlet files. The files must be separated with a `---` delimeter on a new line, and each section must begin with a `# FileName=<name>` line to name the new Quadlet ([#27384](https://github.com/containers/podman/pull/27384)). - Quadlet `.container` files now support a new key, `AppArmor`, for configuring the container's AppArmor profile ([#27095](https://github.com/containers/podman/issues/27095)). - When running the `podman artifact add` command against a `podman machine` VM, if the path being loaded or built is shared into the VM, Podman will load it from the VM's filesystem instead of streaming the data through the REST API, improving performance ([#26321](https://github.com/containers/podman/issues/26321)). - The `podman update` command now features a new option, `--ulimit`, to update container ulimits ([#26381](https://github.com/containers/podman/issues/26381)). - The `podman exec` command now features a new option, `--no-session`, which disables tracking of the exec session to improve performance and startup time ([#26588](https://github.com/containers/podman/issues/26588)). ### Changes - Podman will now automatically attempt to migrate legacy BoltDB databases to SQLite when the system reboots. This is necessary as support for BoltDB will be removed in Podman 6.0 in May. If automatic migration is not possible, a new option, `podman system migrate --migrate-db`, will manually force a migration. - The `podman secret create -` command no longer requires that the secret be provided through a pipe, and instead allows typing the secret through the terminal ([#27879](https://github.com/containers/podman/issues/27879)). ### Bugfixes - Fixed a bug where containers created by `podman play kube` with a healthcheck using the `initialDelaySeconds` option would run healthchecks before the initial delay had expired ([#27678](https://github.com/containers/podman/issues/27678)). - Fixed a bug where healthchecks would sometimes fail to execute due to systemd rate limits. - Fixed a bug where the `podman export` command would emit a `Mount` event instead of an `Export` event. - Fixed a bug where the `podman kube play` command incorrectly handled precedence between environment variables set by both the `envFrom` and `env` fields ([#27287](https://github.com/containers/podman/issues/27287)). - Fixed a bug where the `podman kube play` command would panic when parsing Pod YAML missing the `image` field ([#27784](https://github.com/containers/podman/issues/27784)). - Fixed a bug where the `podman volume mount` command returned empty paths when volumes were handled by a plugin driver ([#27858](https://github.com/containers/podman/issues/27858)). - Fixed a bug where containers created with `--rootfs` instead of from an image would show that they had a healthcheck in the `starting` state even if no healthcheck was defined ([#27651](https://github.com/containers/podman/issues/27651)). - Fixed a bug where the `podman build` command's `--pull=newer` option did not function correctly ([#22845](https://github.com/containers/podman/issues/22845)). - Fixed a bug where the `RequiresMountsFor` field in Quadlet `.container` files incorrectly handled bind-mount paths which contained spaces. - Fixed a bug where the remote Podman client's `podman run --detach-keys` option did not accept an empty string (IE, no detach keys) ([#27414](https://github.com/containers/podman/issues/27414)). - Fixed a bug where the remove Podman client's `podman build --secret ... env=VAR` option would incorrectly try to read the environment variable on the server side, instead of from the client ([#27494](https://github.com/containers/podman/issues/27494)). - Fixed a bug where the `podman artifact push` and `podman artifact pull` commands ignored authentication credentials given by the `--authfile` option ([#27421](https://github.com/containers/podman/issues/27421)). - Fixed a bug where Windows paths were incorrectly handled under some circumstances when using the HyperV machine provider ([#27571](https://github.com/containers/podman/issues/27571)). - Fixed a bug where the `podman run --pod-id-file` option was not properly validated, allowing the creation of containers in pods with improper user namespace configuration ([#26848](https://github.com/containers/podman/issues/26848)). ### API - Added new APIs for interacting with Quadlets, including `GET /libpod/quadlets/{name}/file` (print contents of a Quadlet file), `GET /libpod/quadlets/{name}/exists` (check if the given Quadlet exists), `POST /libpod/quadlets` (install one or more Quadlets), `DELETE /libpod/quadlets` (remove one or more Quadlets), and `DELETE /libpod/quadlets/{name}` (remove a single Quadlet). - Fixed a bug where the Compat and Libpod Logs endpoints for Containers did not use nanosecond-level precision for reported timestamps ([#27961](https://github.com/containers/podman/issues/27691)). - Fixed a bug where the Compat Create endpoint for Containers incorrectly handled healthcheck commands with arguments containing spaces ([#26519](https://github.com/containers/podman/issues/26519)). - Fixed a bug where the Compat Remove endpoint for Secrets was misnamed as `DELETE /secret/{name}` instead of `DELETE /secrets/{name}` ([#27548](https://github.com/containers/podman/issues/27548)). ### Misc - Updated Buildah to v1.43.0 - Updated the containers/storage library v1.62.0 - Updated the containers/image library to v5.39.1 - Updated the containers/common library to v0.67.0

1 0

Podman candidate v5.8.0-rc1 Released
by container.tools.ci＠gmail.com 10 Feb '26

10 Feb '26

Hi all, Podman candidate v5.8.0-rc1 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.8.0-rc1 Release candidate Notes: -------------- ### Features - The `podman quadlet install` command can now install files which contain multiple separate Quadlet files. The files must be separated with a `---` delimeter on a new line, and each section must begin with a `# FileName=<name>` line to name the new Quadlet ([#27384](https://github.com/containers/podman/pull/27384)). - Quadlet `.container` files now support a new key, `AppArmor`, for configuring the container's AppArmor profile ([#27095](https://github.com/containers/podman/issues/27095)). - When running the `podman artifact add` command against a `podman machine` VM, if the path being loaded or built is shared into the VM, Podman will load it from the VM's filesystem instead of streaming the data through the REST API, improving performance ([#26321](https://github.com/containers/podman/issues/26321)). - The `podman update` command now features a new option, `--ulimit`, to update container ulimits ([#26381](https://github.com/containers/podman/issues/26381)). - The `podman exec` command now features a new option, `--no-session`, which disables tracking of the exec session to improve performance and startup time ([#26588](https://github.com/containers/podman/issues/26588)). ### Changes - The `podman secret create -` command no longer requires that the secret be provided through a pipe, and instead allows typing the secret through the terminal ([#27879](https://github.com/containers/podman/issues/27879)). ### Bugfixes - Fixed a bug where containers created by `podman play kube` with a healthcheck using the `initialDelaySeconds` option would run healthchecks before the initial delay had expired ([#27678](https://github.com/containers/podman/issues/27678)). - Fixed a bug where healthchecks would sometimes fail to execute due to systemd rate limits. - Fixed a bug where the `podman export` command would emit a `Mount` event instead of an `Export` event. - Fixed a bug where the `podman kube play` command incorrectly handled precedence between environment variables set by both the `envFrom` and `env` fields ([#27287](https://github.com/containers/podman/issues/27287)). - Fixed a bug where the `podman kube play` command would panic when parsing Pod YAML missing the `image` field ([#27784](https://github.com/containers/podman/issues/27784)). - Fixed a bug where the `podman volume mount` command returned empty paths when volumes were handled by a plugin driver ([#27858](https://github.com/containers/podman/issues/27858)). - Fixed a bug where containers created with `--rootfs` instead of from an image would show that they had a healthcheck in the `starting` state even if no healthcheck was defined ([#27651](https://github.com/containers/podman/issues/27651)). - Fixed a bug where the `podman build` command's `--pull=newer` option did not function correctly ([#22845](https://github.com/containers/podman/issues/22845)). - Fixed a bug where the `RequiresMountsFor` field in Quadlet `.container` files incorrectly handled bind-mount paths which contained spaces. - Fixed a bug where the remote Podman client's `podman run --detach-keys` option did not accept an empty string (IE, no detach keys) ([#27414](https://github.com/containers/podman/issues/27414)). - Fixed a bug where the remove Podman client's `podman build --secret ... env=VAR` option would incorrectly try to read the environment variable on the server side, instead of from the client ([#27494](https://github.com/containers/podman/issues/27494)). - Fixed a bug where the `podman artifact push` and `podman artifact pull` commands ignored authentication credentials given by the `--authfile` option ([#27421](https://github.com/containers/podman/issues/27421)). - Fixed a bug where Windows paths were incorrectly handled under some circumstances when using the HyperV machine provider ([#27571](https://github.com/containers/podman/issues/27571)). - Fixed a bug where the `podman run --pod-id-file` option was not properly validated, allowing the creation of containers in pods with improper user namespace configuration ([#26848](https://github.com/containers/podman/issues/26848)). ### API - Added new APIs for interacting with Quadlets, including `GET /libpod/quadlets/{name}/file` (print contents of a Quadlet file), `GET /libpod/quadlets/{name}/exists` (check if the given Quadlet exists), `POST /libpod/quadlets` (install one or more Quadlets), `DELETE /libpod/quadlets` (remove one or more Quadlets), and `DELETE /libpod/quadlets/{name}` (remove a single Quadlet). - Fixed a bug where the Compat and Libpod Logs endpoints for Containers did not use nanosecond-level precision for reported timestamps ([#27961](https://github.com/containers/podman/issues/27691)). - Fixed a bug where the Compat Create endpoint for Containers incorrectly handled healthcheck commands with arguments containing spaces ([#26519](https://github.com/containers/podman/issues/26519)). - Fixed a bug where the Compat Remove endpoint for Secrets was misnamed as `DELETE /secret/{name}` instead of `DELETE /secrets/{name}` ([#27548](https://github.com/containers/podman/issues/27548)).

1 0

Podman AI-Generated Development Policy RFC!
by Tom Sweeney 05 Feb '26

05 Feb '26

Hi All, The Podman team is cobbling together a policy for handling AI-generated development work. We'd love to hear your thoughts in the document that we're using to create the policy! https://docs.google.com/document/d/1VxYDXT3kIiBAFJHY4fsyFRrddtgIKCrFt_juI7o… If you have problem accessing the document, or want to comment outside of it, please contact Jan Kaluza who is cc'd in this message. t

2 1

How to limit/control container iface/network speed?
by lejeczek 27 Jan '26

27 Jan '26

Hi guys. How do you control, set limits on a container network/ifaces - that is, if possible at all? many thanks, L.

1 0

Podman Cabal Meeting January 6, 2026 Cancelled!
by Tom Sweeney 05 Jan '26

05 Jan '26

Hi All, Due to a lack of topics and a number of folks saying they can't make the meeting tomorrow, we're canceling the January 6, 2026 Podman Cabal meeting. The next Podman Cabal meeting will be on Tuesday, March 3rd, and the next Podman Community Meeting will be on Tuesday February 3rd. Happy New Years! t

1 0