%global with_debug 1

%global with_bundled 1

%if 0%{?with_debug}

%global _find_debuginfo_dwz_opts %{nil}

%global _dwz_low_mem_die_limit 0

%else

%global debug_package %{nil}

%endif

%if ! 0%{?gobuild:1}

%define gobuild(o:) \

scl enable go-toolset-1.12 -- go build -buildmode pie -compiler gc -tags="rpm_crashtraceback ${BUILDTAGS:-}" -ldflags "${LDFLAGS:-} -B 0x$(head -c20 /dev/urandom|od -An -tx1|tr -d ' \\n') -extldflags '%__global_ldflags'" -a -v -x %{?**};

%endif

%global provider github

%global provider_tld com

%global project containers

%global repo buildah

# https://github.com/containers/buildah

%global import_path %{provider}.%{provider_tld}/%{project}/%{repo}

%global git0 https://%{import_path}

%global commit0 9513cb8c7bec0f7789c696aee4d252ebf85194cc

%global shortcommit0 %(c=%{commit0}; echo ${c:0:7})

Name: %{repo}

Version: 1.11.6

Release: 12%{?dist}

Summary: A command line tool used for creating OCI Images

ExcludeArch: %{ix86} s390 ppc ppc64

License: ASL 2.0

URL: https://%{name}.io

Source: %{git0}/archive/%{commit0}/%{name}-%{shortcommit0}.tar.gz

Patch0: buildah-1792243.patch

# related bug: https://bugzilla.redhat.com/show_bug.cgi?id=1784950

# backported:  https://patch-diff.githubusercontent.com/raw/containers/buildah/pull/2031.patch

Patch1: buildah-1784950.patch

Patch2: buildah-1756986.patch

# tracker bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-8945

# backported:  https://github.com/containers/skopeo/pull/825.patch

Patch3: buildah-CVE-2020-8945.patch

# https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1702

# https://github.com/containers/buildah/commit/be1eb6f70fb40e45096b69aeb048d54c526a4a8f.patch

Patch4: buildah-CVE-2020-1702.patch

# tracker bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10696

# patch:       https://github.com/containers/buildah/commit/c61925b8936e93a5e900f91b653a846f7ea3a9ed.patch

Patch5: buildah-CVE-2020-10696.patch

# related bug: https://bugzilla.redhat.com/show_bug.cgi?id=1810069

# backported:  https://github.com/containers/buildah/pull/2095.patch

Patch6: buildah-1810069.patch

# tracker bug: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-14040

# backported:  https://github.com/containers/buildah/pull/2472.patch

Patch7: buildah-CVE-2020-14040.patch

BuildRequires: go-toolset-1.12

BuildRequires: git

BuildRequires: glib2-devel

BuildRequires: libseccomp-devel

BuildRequires: ostree-devel

BuildRequires: glibc-static

BuildRequires: go-md2man

BuildRequires: gpgme-devel

BuildRequires: device-mapper-devel

BuildRequires: libassuan-devel

BuildRequires: make

Requires: runc >= 1.0.0-26

Requires: containers-common

Requires: container-selinux

Requires: slirp4netns >= 0.3-0

%description

The %{name} package provides a command line tool which can be used to

* create a working container from scratch

or

* create a working container from an image as a starting point

* mount/umount a working container's root file system for manipulation

* save container's root file system layer to create a new image

* delete a working container or an image

%package tests

Summary: Tests for %{name}

Requires: %{name} = %{version}-%{release}

Requires: bzip2

Requires: podman

Requires: golang

%description tests

%{summary}

This package contains system tests for %{name}

%prep

%autosetup -Sgit -n %{name}-%{commit0}

sed -i 's/GOMD2MAN =/GOMD2MAN ?=/' docs/Makefile

sed -i '/docs install/d' Makefile

%build

mkdir _build

pushd _build

mkdir -p src/%{provider}.%{provider_tld}/%{project}

ln -s $(dirs +1 -l) src/%{import_path}

popd

mv vendor src

export GOPATH=$(pwd)/_build:$(pwd)

export BUILDTAGS='seccomp selinux btrfs_noversion exclude_graphdriver_btrfs'

export GO111MODULE=off

rm -f src/github.com/containers/storage/drivers/register/register_btrfs.go

%gobuild -o %{name} %{import_path}/cmd/%{name}

%gobuild -o imgtype %{import_path}/tests/imgtype

GOMD2MAN=go-md2man %{__make} -C docs

%install

export GOPATH=$(pwd)/_build:$(pwd):%{gopath}

make DESTDIR=%{buildroot} PREFIX=%{_prefix} install install.completions

install -d -p %{buildroot}/%{_datadir}/%{name}/test/system

cp -pav tests/. %{buildroot}/%{_datadir}/%{name}/test/system

cp imgtype %{buildroot}/%{_bindir}/%{name}-imgtype

make DESTDIR=%{buildroot} PREFIX=%{_prefix} -C docs install

#define license tag if not already defined

%{!?_licensedir:%global license %doc}

%files

%license LICENSE

%doc README.md

%{_bindir}/%{name}

%{_mandir}/man1/%{name}*

%dir %{_datadir}/bash-completion

%dir %{_datadir}/bash-completion/completions

%{_datadir}/bash-completion/completions/%{name}

%files tests

%license LICENSE

%{_bindir}/%{name}-imgtype

%{_datadir}/%{name}/test

%changelog

* Fri Sep 11 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-12

- fix "CVE-2020-14040 buildah: golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash [rhel-7]"

- Resolves: #1854714

* Wed Apr 08 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-11

- fix "buildah is not expanding env vars in file paths"

- Resolves: #1822031

* Tue Mar 31 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-10

- fix "CVE-2020-10696 buildah: crafted input tar file may lead to local file overwriting during image build process"

- Resolves: #1817738

* Mon Mar 16 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-9

- fix "CVE-2020-1702 buildah: containers/image: Container images read entire image manifest into memory"

- Resolves: #1810612

* Tue Mar 03 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-8

- fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"

- Resolves: #1803583

* Tue Mar 03 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-7

- fix "CVE-2020-8945 proglottis/gpgme: Use-after-free in GPGME bindings during container image pull"

- Resolves: #1806936

* Fri Feb 21 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-6

- Fix "COPY command takes long time with buildah"

- Resolves: #1756986

* Wed Feb 19 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-5

- fix "Podman support for FIPS Mode requires a bind mount inside the container"

- Resolves: #1804186

* Fri Jan 24 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-4

- resurrect s390x arch as kernel there now has the renameat2 syscall (#1773504)

* Mon Jan 20 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-3

- Fix thread safety of gpgme (#1792243)

* Thu Jan 16 2020 Jindrich Novy <jnovy@redhat.com> - 1.11.6-2

- temporary disable s390x arch due to #1773504 causing fuse-overlayfs

  failing to build - skopeo/contaners-common requires it

* Thu Dec 05 2019 Jindrich Novy <jnovy@redhat.com> - 1.11.6-1

- update to 1.11.6

- Related: RHELPLAN-26239

* Wed Dec 04 2019 Jindrich Novy <jnovy@redhat.com> - 1.11.5-1

- update to 1.11.5

- Related: RHELPLAN-26239

* Tue Sep 17 2019 Jindrich Novy <jnovy@redhat.com> - 1.9.0-4

- Use autosetup macro again.

* Thu Sep 12 2019 Jindrich Novy <jnovy@redhat.com> - 1.9.0-3

- Fix CVE-2019-10214.

* Fri Aug 02 2019 Jindrich Novy <jnovy@redhat.com> - 1.9.0-2

- use 1.9.0 in RHEL7u7

* Mon Jun 24 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.9.0-1

- bump to v1.9.0

* Fri Jun 07 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.8.3-1

- Resolves: #1717913 - rebase to v1.8.3

* Tue May 14 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.8.2-2.gite23314b

- built with %%gobuild

- add seccomp and selinux buildtags

* Tue May 14 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.8.2-1.gite23314b

- Resolves: #1706058 - bump to v1.8.2

- fix indentation in a prior changelog entry

* Fri May 03 2019 Lokesh Mandvekar <lsm5@redhat.com> - 1.8.1-1.git57b4288

- Resolves: #1706058 - bump to v1.8.1

* Fri Feb 22 2019 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.7-2.git873f001

- rebase

* Wed Jan 30 2019 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.6-2.git5f95bd9

- rebase

* Mon Dec 10 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.5-2.gite94b4f9

- go toolset 1.10

* Thu Nov 22 2018 Dan Walsh <dwalsh@redhat.com> - 1.5-1.gite94b4f98

- bump to v1.5 Release

* Thu Nov 08 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.4-4.gitc8ed967

- buildrequires for centos

* Tue Nov 06 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.4-3.gitc8ed967

- rebase

* Tue Oct 09 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.4-2.git608fa84

- rebase

* Thu Sep 27 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 1.3-2.git4888163

- rebuilt with scl golang 

* Sun Aug 5 2018 Dan Walsh <dwalsh@redhat.com> - 1.3-1

- Bump to v1.3

- Vendor in lates containers/image

- build-using-dockerfile: let -t include transports again

- Block use of /proc/acpi and /proc/keys from inside containers

- Fix handling of --registries-conf

- Fix becoming a maintainer link

- add optional CI test fo darwin

- Don't pass a nil error to errors.Wrapf()

- image filter test: use kubernetes/pause as a "since"

- Add --cidfile option to from

- vendor: update containers/storage

- Contributors need to find the CONTRIBUTOR.md file easier

- Add a --loglevel option to build-with-dockerfile

- Create Development plan

- cmd: Code improvement

- allow buildah cross compile for a darwin target

- Add unused function param lint check

- docs: Follow man-pages(7) suggestions for SYNOPSIS

- Start using github.com/seccomp/containers-golang

- umount: add all option to umount all mounted containers

- runConfigureNetwork(): remove an unused parameter

- Update github.com/opencontainers/selinux

- Fix buildah bud --layers

- Force ownership of /etc/hosts and /etc/resolv.conf to 0:0

- main: if unprivileged, reexec in a user namespace

- Vendor in latest imagebuilder

- Reduce the complexity of the buildah.Run function

- mount: output it before replacing lastError

- Vendor in latest selinux-go code

- Implement basic recognition of the "--isolation" option

- Run(): try to resolve non-absolute paths using $PATH

- Run(): don't include any default environment variables

- build without seccomp

- vendor in latest runtime-tools

- bind/mount_unsupported.go: remove import errors

- Update github.com/opencontainers/runc

- Add Capabilities lists to BuilderInfo

- Tweaks for commit tests

- commit: recognize committing to second storage locations

- Fix ARGS parsing for run commands

- Add info on registries.conf to from manpage

- Switch from using docker to podman for testing in .papr

- buildah: set the HTTP User-Agent

- ONBUILD tutorial

- Add information about the configuration files to the install docs

- Makefile: add uninstall

- Add tilde info for push to troubleshooting

- mount: support multiple inputs

- Use the right formatting when adding entries to /etc/hosts

- Vendor in latest go-selinux bindings

- Allow --userns-uid-map/--userns-gid-map to be global options

- bind: factor out UnmountMountpoints

- Run(): simplify runCopyStdio()

- Run(): handle POLLNVAL results

- Run(): tweak terminal mode handling

- Run(): rename 'copyStdio' to 'copyPipes'

- Run(): don't set a Pdeathsig for the runtime

- Run(): add options for adding and removing capabilities

- Run(): don't use a callback when a slice will do

- setupSeccomp(): refactor

- Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers

- Escape use of '_' in .md docs

- Break out getProcIDMappings()

- Break out SetupIntermediateMountNamespace()

- Add Multi From Demo

- Use the c/image conversion code instead of converting configs manually

- Don't throw away the manifest MIME type and guess again

- Consolidate loading manifest and config in initConfig

- Pass a types.Image to Builder.initConfig

- Require an image ID in importBuilderDataFromImage

- Use c/image/manifest.GuessMIMEType instead of a custom heuristic

- Do not ignore any parsing errors in initConfig

- Explicitly handle "from scratch" images in Builder.initConfig

- Fix parsing of OCI images

- Simplify dead but dangerous-looking error handling

- Don't ignore v2s1 history if docker_version is not set

- Add --rm and --force-rm to buildah bud

- Add --all,-a flag to buildah images

- Separate stdio buffering from writing

- Remove tty check from images --format

- Add environment variable BUILDAH_RUNTIME

- Add --layers and --no-cache to buildah bud

- Touch up images man

- version.md: fix DESCRIPTION

- tests: add containers test

- tests: add images test

- images: fix usage

- fix make clean error

- Change 'registries' to 'container registries' in man

- add commit test

- Add(): learn to record hashes of what we add

- Minor update to buildah config documentation for entrypoint

- Bump to v1.2-dev

- Add registries.conf link to a few man pages

* Thu Jul 19 2018 Dan Walsh <dwalsh@redhat.com> - 1.2-2

- buildah does not require ostree

* Sun Jul 15 2018 Dan Walsh <dwalsh@redhat.com> 1.2-1

- Vendor in latest containers/image

- build-using-dockerfile: let -t include transports again

- Block use of /proc/acpi and /proc/keys from inside containers

- Fix handling of --registries-conf

- Fix becoming a maintainer link

- add optional CI test fo darwin

- Don't pass a nil error to errors.Wrapf()

- image filter test: use kubernetes/pause as a "since"

- Add --cidfile option to from

- vendor: update containers/storage

- Contributors need to find the CONTRIBUTOR.md file easier

- Add a --loglevel option to build-with-dockerfile

- Create Development plan

- cmd: Code improvement

- allow buildah cross compile for a darwin target

- Add unused function param lint check

- docs: Follow man-pages(7) suggestions for SYNOPSIS

- Start using github.com/seccomp/containers-golang

- umount: add all option to umount all mounted containers

- runConfigureNetwork(): remove an unused parameter

- Update github.com/opencontainers/selinux

- Fix buildah bud --layers

- Force ownership of /etc/hosts and /etc/resolv.conf to 0:0

- main: if unprivileged, reexec in a user namespace

- Vendor in latest imagebuilder

- Reduce the complexity of the buildah.Run function

- mount: output it before replacing lastError

- Vendor in latest selinux-go code

- Implement basic recognition of the "--isolation" option

- Run(): try to resolve non-absolute paths using $PATH

- Run(): don't include any default environment variables

- build without seccomp

- vendor in latest runtime-tools

- bind/mount_unsupported.go: remove import errors

- Update github.com/opencontainers/runc

- Add Capabilities lists to BuilderInfo

- Tweaks for commit tests

- commit: recognize committing to second storage locations

- Fix ARGS parsing for run commands

- Add info on registries.conf to from manpage

- Switch from using docker to podman for testing in .papr

- buildah: set the HTTP User-Agent

- ONBUILD tutorial

- Add information about the configuration files to the install docs

- Makefile: add uninstall

- Add tilde info for push to troubleshooting

- mount: support multiple inputs

- Use the right formatting when adding entries to /etc/hosts

- Vendor in latest go-selinux bindings

- Allow --userns-uid-map/--userns-gid-map to be global options

- bind: factor out UnmountMountpoints

- Run(): simplify runCopyStdio()

- Run(): handle POLLNVAL results

- Run(): tweak terminal mode handling

- Run(): rename 'copyStdio' to 'copyPipes'

- Run(): don't set a Pdeathsig for the runtime

- Run(): add options for adding and removing capabilities

- Run(): don't use a callback when a slice will do

- setupSeccomp(): refactor

- Change RunOptions.Stdin/Stdout/Stderr to just be Reader/Writers

- Escape use of '_' in .md docs

- Break out getProcIDMappings()

- Break out SetupIntermediateMountNamespace()

- Add Multi From Demo

- Use the c/image conversion code instead of converting configs manually

- Don't throw away the manifest MIME type and guess again

- Consolidate loading manifest and config in initConfig

- Pass a types.Image to Builder.initConfig

- Require an image ID in importBuilderDataFromImage

- Use c/image/manifest.GuessMIMEType instead of a custom heuristic

- Do not ignore any parsing errors in initConfig

- Explicitly handle "from scratch" images in Builder.initConfig

- Fix parsing of OCI images

- Simplify dead but dangerous-looking error handling

- Don't ignore v2s1 history if docker_version is not set

- Add --rm and --force-rm to buildah bud

- Add --all,-a flag to buildah images

- Separate stdio buffering from writing

- Remove tty check from images --format

- Add environment variable BUILDAH_RUNTIME

- Add --layers and --no-cache to buildah bud

- Touch up images man

- version.md: fix DESCRIPTION

- tests: add containers test

- tests: add images test

- images: fix usage

- fix make clean error

- Change 'registries' to 'container registries' in man

- add commit test

- Add(): learn to record hashes of what we add

- Minor update to buildah config documentation for entrypoint

- Add registries.conf link to a few man pages

* Sun Jun 10 2018 Dan Walsh <dwalsh@redhat.com> 1.1-1

- Drop capabilities if running container processes as non root

- Print Warning message if cmd will not be used based on entrypoint

- Update 01-intro.md

- Shouldn't add insecure registries to list of search registries

- Report errors on bad transports specification when pushing images

- Move parsing code out of common for namespaces and into pkg/parse.go

- Add disable-content-trust noop flag to bud

- Change freenode chan to buildah

- runCopyStdio(): don't close stdin unless we saw POLLHUP

- Add registry errors for pull

- runCollectOutput(): just read until the pipes are closed on us

- Run(): provide redirection for stdio

- rmi, rm: add test

- add mount test

- Add parameter judgment for commands that do not require parameters

- Add context dir to bud command in baseline test

- run.bats: check that we can run with symlinks in the bundle path

- Give better messages to users when image can not be found

- use absolute path for bundlePath

- Add environment variable to buildah --format

- rm: add validation to args and all option

- Accept json array input for config entrypoint

- Run(): process RunOptions.Mounts, and its flags

- Run(): only collect error output from stdio pipes if we created some

- Add OnBuild support for Dockerfiles

- Quick fix on demo readme

- run: fix validate flags

- buildah bud should require a context directory or URL

- Touchup tutorial for run changes

- Validate common bud and from flags

- images: Error if the specified imagename does not exist

- inspect: Increase err judgments to avoid panic

- add test to inspect

- buildah bud picks up ENV from base image

- Extend the amount of time travis_wait should wait

- Add a make target for Installing CNI plugins

- Add tests for namespace control flags

- copy.bats: check ownerships in the container

- Fix SELinux test errors when SELinux is enabled

- Add example CNI configurations

- Run: set supplemental group IDs

- Run: use a temporary mount namespace

- Use CNI to configure container networks

- add/secrets/commit: Use mappings when setting permissions on added content

- Add CLI options for specifying namespace and cgroup setup

- Always set mappings when using user namespaces

- Run(): break out creation of stdio pipe descriptors

- Read UID/GID mapping information from containers and images

- Additional bud CI tests

- Run integration tests under travis_wait in Travis

- build-using-dockerfile: add --annotation

- Implement --squash for build-using-dockerfile and commit

- Vendor in latest container/storage for devicemapper support

- add test to inspect

- Vendor github.com/onsi/ginkgo and github.com/onsi/gomega

- Test with Go 1.10, too

- Add console syntax highlighting to troubleshooting page

- bud.bats: print "$output" before checking its contents

- Manage "Run" containers more closely

- Break Builder.Run()'s "run runc" bits out

- util.ResolveName(): handle completion for tagged/digested image names

- Handle /etc/hosts and /etc/resolv.conf properly in container

- Documentation fixes

- Make it easier to parse our temporary directory as an image name

- Makefile: list new pkg/ subdirectoris as dependencies for buildah

- containerImageSource: return more-correct errors

- API cleanup: PullPolicy and TerminalPolicy should be types

- Make "run --terminal" and "run -t" aliases for "run --tty"

- Vendor github.com/containernetworking/cni v0.6.0

- Update github.com/containers/storage

- Update github.com/projectatomic/libpod

- Add support for buildah bud --label

- buildah push/from can push and pull images with no reference

- Vendor in latest containers/image

- Update gometalinter to fix install.tools error

- Update troubleshooting with new run workaround

- Added a bud demo and tidied up

- Attempt to download file from url, if fails assume Dockerfile

- Add buildah bud CI tests for ENV variables

- Re-enable rpm .spec version check and new commit test

- Update buildah scratch demo to support el7

- Added Docker compatibility demo

- Update to F28 and new run format in baseline test

- Touchup man page short options across man pages

- Added demo dir and a demo. chged distrorlease

- builder-inspect: fix format option

- Add cpu-shares short flag (-c) and cpu-shares CI tests

- Minor fixes to formatting in rpm spec changelog

- Fix rpm .spec changelog formatting

- CI tests and minor fix for cache related noop flags

- buildah-from: add effective value to mount propagation

* Mon May 7 2018 Dan Walsh <dwalsh@redhat.com> 1.0-1

- Remove buildah run cmd and entrypoint execution

- Add Files section with registries.conf to pertinent man pages

- Force "localhost" as a default registry

- Add --compress, --rm, --squash flags as a noop for bud

- Add FIPS mode secret to buildah run and bud

- Add config --comment/--domainname/--history-comment/--hostname

- Add support for --iidfile to bud and commit

- Add /bin/sh -c to entrypoint in config

- buildah images and podman images are listing different sizes

- Remove tarball as an option from buildah push --help

- Update entrypoint behaviour to match docker

- Display imageId after commit

- config: add support for StopSignal

- Allow referencing stages as index and names

- Add multi-stage builds support

- Vendor in latest imagebuilder, to get mixed case AS support

- Allow umount to have multi-containers

- Update buildah push doc

- buildah bud walks symlinks

- Imagename is required for commit atm, update manpage

* Thu May 03 2018 Lokesh Mandvekar <lsm5@redhat.com> - 0.16-3.git532e267

- Resolves: #1573681

- built commit 532e267

* Tue Apr 10 2018 Lokesh Mandvekar <lsm5@redhat.com> - 0.16.0-2.git6f7d05b

- built commit 6f7d05b

* Wed Apr 4 2018 Dan Walsh <dwalsh@redhat.com> 0.16-1

- Add support for shell

- Vendor in latest containers/image

- docker-archive generates docker legacy compatible images

- Do not create $DiffID subdirectories for layers with no configs

- Ensure the layer IDs in legacy docker/tarfile metadata are unique

- docker-archive: repeated layers are symlinked in the tar file

- sysregistries: remove all trailing slashes

- Improve docker/* error messages

- Fix failure to make auth directory

- Create a new slice in Schema1.UpdateLayerInfos

- Drop unused storageImageDestination.{image,systemContext}

- Load a *storage.Image only once in storageImageSource

- Support gzip for docker-archive files

- Remove .tar extension from blob and config file names

- ostree, src: support copy of compressed layers

- ostree: re-pull layer if it misses uncompressed_digest|uncompressed_size

- image: fix docker schema v1 -> OCI conversion

- Add /etc/containers/certs.d as default certs directory

- Change image time to locale, add troubleshooting.md, add logo to other mds

- Allow --cmd parameter to have commands as values

- Document the mounts.conf file

- Fix man pages to format correctly

- buildah from now supports pulling images using the following transports:

- docker-archive, oci-archive, and dir.

- If the user overrides the storage driver, the options should be dropped

- Show Config/Manifest as JSON string in inspect when format is not set

- Adds feature to pull compressed docker-archive files

* Tue Feb 27 2018 Dan Walsh <dwalsh@redhat.com> 0.15-1

- Fix handling of buildah run command options

* Mon Feb 26 2018 Dan Walsh <dwalsh@redhat.com> 0.14-1

- If commonOpts do not exist, we should return rather then segfault

- Display full error string instead of just status

- Implement --volume and --shm-size for bud and from

- Fix secrets patch for buildah bud

- Fixes the naming issue of blobs and config for the dir transport by removing the .tar extension

* Mon Feb 26 2018 Lokesh Mandvekar <lsm5@redhat.com> - 0.13-1.git99066e0

- use correct version

* Mon Feb 26 2018 Lokesh Mandvekar <lsm5@redhat.com> - 0.12-4.git99066e0

- enable debuginfo

* Mon Feb 26 2018 Lokesh Mandvekar <lsm5@redhat.com> - 0.12-3.git99066e0

- BR: libseccomp-devel

* Mon Feb 26 2018 Lokesh Mandvekar <lsm5@redhat.com> - 0.12-2.git99066e0

- Resolves: #1548535

- built commit 99066e0

* Mon Feb 12 2018 Dan Walsh <dwalsh@redhat.com> 0.12-1

- Added handing for simpler error message for Unknown Dockerfile instructions.

- Change default certs directory to /etc/containers/certs.dir

- Vendor in latest containers/image

- Vendor in latest containers/storage

- build-using-dockerfile: set the 'author' field for MAINTAINER

- Return exit code 1 when buildah-rmi fails

- Trim the image reference to just its name before calling getImageName

- Touch up rmi -f usage statement

- Add --format and --filter to buildah containers

- Add --prune,-p option to rmi command

- Add authfile param to commit

- Fix --runtime-flag for buildah run and bud

- format should override quiet for images

- Allow all auth params to work with bud

- Do not overwrite directory permissions on --chown

- Unescape HTML characters output into the terminal

- Fix: setting the container name to the image

- Prompt for un/pwd if not supplied with --creds

- Make bud be really quiet

- Return a better error message when failed to resolve an image

- Update auth tests and fix bud man page

* Mon Feb 05 2018 Lokesh Mandvekar <lsm5@redhat.com> - 0.11-3.git49095a8

- Resolves: #1542236 - add ostree and bump runc dep

* Thu Feb 01 2018 Frantisek Kluknavsky <fkluknav@redhat.com> - 0.11-2.git49095a8

- rebased to 49095a83f8622cf69532352d183337635562e261

* Tue Jan 16 2018 Dan Walsh <dwalsh@redhat.com> 0.11-1

- Add --all to remove containers

- Add --all functionality to rmi

- Show ctrid when doing rm -all

- Ignore sequential duplicate layers when reading v2s1

- Lots of minor bug fixes

- Vendor in latest containers/image and containers/storage

* Sat Dec 23 2017 Dan Walsh <dwalsh@redhat.com> 0.10-2

- Fix checkin

* Sat Dec 23 2017 Dan Walsh <dwalsh@redhat.com> 0.10-1

- Display Config and Manifest as strings

- Bump containers/image

- Use configured registries to resolve image names

- Update to work with newer image library

- Add --chown option to add/copy commands

* Tue Dec 12 2017 Lokesh Mandvekar <lsm5@redhat.com> - 0.9-2.git04ea079

- build for all arches

* Sat Dec 2 2017 Dan Walsh <dwalsh@redhat.com> 0.9-1

- Allow push to use the image id

- Make sure builtin volumes have the correct label

* Wed Nov 22 2017 Dan Walsh <dwalsh@redhat.com> 0.8-1

- Buildah bud was failing on SELinux machines, this fixes this

- Block access to certain kernel file systems inside of the container

* Thu Nov 16 2017 Dan Walsh <dwalsh@redhat.com> 0.7-1

- Ignore errors when trying to read containers buildah.json for loading SELinux reservations

-     Use credentials from kpod login for buildah

- Adds support for converting manifest types when using the dir transport

- Rework how we do UID resolution in images

- Bump github.com/vbatts/tar-split

- Set option.terminal appropriately in run

* Thu Nov 16 2017 Frantisek Kluknavsky <fkluknav@redhat.com> - 0.5-5.gitf7dc659

- revert building for s390x, it is intended for rhel 7.5

* Wed Nov 15 2017 Dan Walsh <dwalsh@redhat.com> 0.5-4

- Add requires for container-selinux

* Mon Nov 13 2017 Frantisek Kluknavsky <fkluknav@redhat.com> - 0.5-3.gitf7dc659

- build for s390x, https://bugzilla.redhat.com/show_bug.cgi?id=1482234

* Wed Nov 08 2017 Dan Walsh <dwalsh@redhat.com> 0.5-2

-  Bump github.com/vbatts/tar-split

-  Fixes CVE That could allow a container image to cause a DOS

* Tue Nov 07 2017 Dan Walsh <dwalsh@redhat.com> 0.5-1

-  Add secrets patch to buildah

-  Add proper SELinux labeling to buildah run

-  Add tls-verify to bud command

-  Make filtering by date use the image's date

-  images: don't list unnamed images twice

-  Fix timeout issue

-  Add further tty verbiage to buildah run

-  Make inspect try an image on failure if type not specified

-  Add support for `buildah run --hostname`

-  Tons of bug fixes and code cleanup

* Tue Nov  7 2017 Nalin Dahyabhai <nalin@redhat.com> - 0.4-2.git01db066

- bump to latest version

- set GIT_COMMIT at build-time

* Fri Sep 22 2017 Dan Walsh <dwalsh@redhat.com> 0.4-1.git9cbccf88c

-   Add default transport to push if not provided

-   Avoid trying to print a nil ImageReference

-   Add authentication to commit and push

-   Add information on buildah from man page on transports

-   Remove --transport flag

-   Run: do not complain about missing volume locations

-   Add credentials to buildah from

-   Remove export command

-   Run(): create the right working directory

-   Improve "from" behavior with unnamed references

-   Avoid parsing image metadata for dates and layers

-   Read the image's creation date from public API

-   Bump containers/storage and containers/image

-   Don't panic if an image's ID can't be parsed

-   Turn on --enable-gc when running gometalinter

-   rmi: handle truncated image IDs