go 1.23.0 => 1.24.6
github.com/containers/image/v5 v5.24.2 => v5.29.3
github.com/moby/buildkit v0.11.4 => v0.12.5
github.com/urfave/cli/v2 v2.27.6 => v2.27.7
golang.org/x/sys v0.33.0 => v0.36.0
golang.org/x/term v0.31.0 => v0.34.0

via replaces:

github.com/go-git/go-git/v5 => github.com/go-git/go-git/v5 v5.13.0
github.com/mattn/go-sqlite3 => github.com/mattn/go-sqlite3 v1.14.32
github.com/go-jose/go-jose/v3 => github.com/go-jose/go-jose/v3 v3.0.4
gopkg.in/go-jose/go-jose.v2 => gopkg.in/go-jose/go-jose.v2 v2.6.3
github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.15
golang.org/x/net => golang.org/x/net v0.38.0
github.com/vbatts/go-mtree => github.com/vbatts/go-mtree v0.6.0

Signed-off-by: Ryan Harper <[email protected]>

Signed-off-by: Ravi Chamarthy <[email protected]>

Tested on a Debian 13 Trixie amd64 VM

[install deps]
- Split out debian setup since package names diverge
- Merged common ubuntu/debian packages
- Add debian specific package names/needs
- Added sudo for access to modinfo, not always in user PATH

[test]
- Added a env check to help non-github runner systems to detect when
settings aren't exported to avoid getting test failure but with
no indication why test doesn't run successfully.

Fixes: #719

Signed-off-by: Ryan Harper <[email protected]>

hacking.md told lies about setting CLONE_D and how to use it.

This actually adds the variable.

Signed-off-by: Michael McCracken <[email protected]>

* fix: uniquify LXC name to avoid socket clashes

Currently, if:
concurrent stacker runs are happening on a system,
and they are building containers with the same name,
and they are being done inside a mount namespace,
and the path name given as the roots dir is the same,
but the actual mounted volume is different,

then both stackers will be able to acquire the file lock at
$rootdir/.lock, and will go ahead and start containers named $name,
which will then race to set up the lxc control socket, which is named
after the container name and the rootfs path, which are both the same
here.

This fix adds a UUID to the container name, which ensures the sockets do
not clash.

Adds a test 'concurrent.bats' to test this, and includes some other test
changes to make it easier to run tests locally with a cached copy of the
base images.

Signed-off-by: Michael McCracken <[email protected]>

* build: make download-tools idempotent

should be able to re-run 'make download-tools' and not have it fail

Signed-off-by: Michael McCracken <[email protected]>

* ci: add bats test state dirs to gitignore

When debugging tests, if you comment out the cleanup in helpers, you end
up with a bunch of stackertest- dirs which really gum up the output of
search tools while you work, so ignore those dirs.

Signed-off-by: Michael McCracken <[email protected]>

* test: skip zot auth test when zot not configured

We do this elsewhere, should have had this in from the start

Signed-off-by: Michael McCracken <[email protected]>

---------

Signed-off-by: Michael McCracken <[email protected]>