From 6159372e0e9062d2222bf235f518219848d59f45 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Tue, 29 Aug 2023 21:07:01 +0000
Subject: [PATCH 01/13] [packit] 2.221.1 upstream release
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Upstream tag: v2.221.1
Upstream commit: bfb44d38

If you need to do any change in this pull request, you need to locally fetch the source branch of it and push it (with a fix) to your fork (as it is not possible to push to the branch created in the Packit’s fork):
```
git fetch https://src.fedoraproject.org/forks/packit/rpms/container-selinux.git refs/heads/*:refs/remotes/packit/*
git checkout packit/2.221.1-f39-update-propose_downstream
```
---
 .gitignore             | 1 +
 README.packit          | 2 +-
 container-selinux.spec | 2 +-
 sources                | 2 +-
 4 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 5e1ef4b..4d18507 100644
--- a/.gitignore
+++ b/.gitignore
@@ -216,3 +216,4 @@
 /v2.219.0.tar.gz
 /v2.221.tar.gz
 /v2.221.0.tar.gz
+/v2.221.1.tar.gz
diff --git a/README.packit b/README.packit
index d7c433c..797aefb 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.78.2.post2+g81828af.
+The file was generated using packit 0.79.0.post2+g93f33d9.
diff --git a/container-selinux.spec b/container-selinux.spec
index 6eeab50..9c3efc3 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.221.0
+Version: 2.221.1
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index 38029d7..7ecf5ea 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.221.0.tar.gz) = 71e4bbc1507f9d04dd78c5881814c57b2138ed91ff474f0ce6db5da5e14ce848d7fe41952284b3525fb222eaf364dcc84efbb2f7641d78ac9abf5343e481be5d
+SHA512 (v2.221.1.tar.gz) = 5ba0144812b4df7b5ef2480cdb1330f3aeae4781ee89d3342770cd301b3c8df764a144ca32f622a28adadeb9b973ede8008c23eacca51edec12d3882bceb2d9a

From f273ccc8d6caf6f04ac65c20ad7bfcda0f82e417 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Sun, 17 Sep 2023 13:49:21 +0000
Subject: [PATCH 02/13] [packit] 2.222.0 upstream release

Upstream tag: v2.222.0
Upstream commit: cbaa1ba7
---
 .gitignore             | 1 +
 README.packit          | 2 +-
 container-selinux.spec | 2 +-
 sources                | 2 +-
 4 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 4d18507..16e4ef8 100644
--- a/.gitignore
+++ b/.gitignore
@@ -217,3 +217,4 @@
 /v2.221.tar.gz
 /v2.221.0.tar.gz
 /v2.221.1.tar.gz
+/v2.222.0.tar.gz
diff --git a/README.packit b/README.packit
index 797aefb..786c2a0 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.79.0.post2+g93f33d9.
+The file was generated using packit 0.80.0.post8+gf2b5fcbc.
diff --git a/container-selinux.spec b/container-selinux.spec
index 9c3efc3..324451a 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.221.1
+Version: 2.222.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index 7ecf5ea..e18b4c0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.221.1.tar.gz) = 5ba0144812b4df7b5ef2480cdb1330f3aeae4781ee89d3342770cd301b3c8df764a144ca32f622a28adadeb9b973ede8008c23eacca51edec12d3882bceb2d9a
+SHA512 (v2.222.0.tar.gz) = f5475c4f0d99c0b594637d004b526f8c129e967ed93b558e11dbed772df958cd6967f0a3183ea02cd1c7ef941510b59e9ffdf1a1238ae6880c220466967d683a

From 5c638b573c958493578aa11cca2a2a5b085ec23c Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Wed, 11 Oct 2023 11:09:06 +0000
Subject: [PATCH 03/13] [packit] 2.224.0 upstream release

Upstream tag: v2.224.0
Upstream commit: 31e9f0bd
---
 .gitignore             |  1 +
 .packit.yaml           | 67 ++++++++++++++++++++++++++++++++++--------
 README.packit          |  2 +-
 container-selinux.spec |  2 +-
 sources                |  2 +-
 5 files changed, 59 insertions(+), 15 deletions(-)

diff --git a/.gitignore b/.gitignore
index 16e4ef8..a935d69 100644
--- a/.gitignore
+++ b/.gitignore
@@ -218,3 +218,4 @@
 /v2.221.0.tar.gz
 /v2.221.1.tar.gz
 /v2.222.0.tar.gz
+/v2.224.0.tar.gz
diff --git a/.packit.yaml b/.packit.yaml
index b4167a5..6f84a58 100644
--- a/.packit.yaml
+++ b/.packit.yaml
@@ -11,36 +11,79 @@ srpm_build_deps:
 jobs:
   - job: copr_build
     trigger: pull_request
+    notifications:
+      failure_comment:
+        message: "Ephemeral COPR build failed. @containers/packit-build please check."
     enable_net: true
     # container-selinux is noarch so we only need to test on one arch
-    targets: &pr_copr_targets
+    targets:
       - fedora-all
-      - centos-stream-9
-      - centos-stream-8
+      - fedora-eln
+      - epel-9
+      - epel-8
 
   # Run on commit to main branch
+  # Build targets managed in copr settings
   - job: copr_build
     trigger: commit
+    notifications:
+      failure_comment:
+        message: "podman-next COPR build failed. @containers/packit-build please check."
     branch: main
     owner: rhcontainerbot
     project: podman-next
     enable_net: true
 
   # All tests specified in the `/plans/` subdir
-  # FIXME: uncomment e2e tests after disk space issues resolved on testing farm
-  #- job: tests
-  #  trigger: pull_request
-  #  targets: *test_targets
-  #  identifier: podman_e2e_test
-  #  tmt_plan: "/plans/podman_e2e_test"
-
+  # Podman e2e tests for Fedora and CentOS Stream
   - job: tests
     trigger: pull_request
-    # arch assumed to be x86_64 by default.
-    targets: *pr_copr_targets
+    notifications:
+      failure_comment:
+        message: "podman e2e tests failed. @containers/packit-build please check."
+    targets: &pr_test_targets
+      - fedora-all
+      - epel-9
+      - epel-8
+    identifier: podman_e2e_test
+    tmt_plan: "/plans/podman_e2e_test"
+
+  # Podman system tests for Fedora and CentOS Stream
+  - job: tests
+    trigger: pull_request
+    notifications:
+      failure_comment:
+        message: "podman system tests failed. @containers/packit-build please check."
+    targets: *pr_test_targets
     identifier: podman_system_test
     tmt_plan: "/plans/podman_system_test"
 
+  # Podman e2e tests for RHEL
+  - job: tests
+    trigger: pull_request
+    use_internal_tf: true
+    notifications:
+      failure_comment:
+        message: "podman e2e tests failed on RHEL. @containers/packit-build please check."
+    targets: &pr_test_targets_rhel
+      epel-9-x86_64:
+        distros: [RHEL-9.2.0-Nightly]
+      epel-8-x86_64:
+        distros: [RHEL-8.10.0-Nightly]
+    identifier: podman_e2e_test_internal
+    tmt_plan: "/plans/podman_e2e_test"
+
+  # Podman system tests for RHEL
+  - job: tests
+    trigger: pull_request
+    use_internal_tf: true
+    notifications:
+      failure_comment:
+        message: "podman system tests failed on RHEL. @containers/packit-build please check."
+    targets: *pr_test_targets_rhel
+    identifier: podman_system_test_internal
+    tmt_plan: "/plans/podman_system_test"
+
   - job: propose_downstream
     trigger: release
     update_release: false
diff --git a/README.packit b/README.packit
index 786c2a0..327dfec 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.80.0.post8+gf2b5fcbc.
+The file was generated using packit 0.83.0.post1.dev4+g46d87465.
diff --git a/container-selinux.spec b/container-selinux.spec
index 324451a..3c995a5 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.222.0
+Version: 2.224.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index e18b4c0..2eec748 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.222.0.tar.gz) = f5475c4f0d99c0b594637d004b526f8c129e967ed93b558e11dbed772df958cd6967f0a3183ea02cd1c7ef941510b59e9ffdf1a1238ae6880c220466967d683a
+SHA512 (v2.224.0.tar.gz) = ab838c379aae99347c5d49ef84513c5fa1cd03faf1ab6b1dd4b6c571875c7c9df389abfb41ce0e2c2a57e14d11c47cbac85e2a6ad8004c2db6087849d91282aa

From 3fd07a2fa71d306116f1cc8f497569acd45e5334 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Thu, 30 Nov 2023 00:40:56 +0000
Subject: [PATCH 04/13] [packit] 2.226.0 upstream release

Upstream tag: v2.226.0
Upstream commit: cff8553f
---
 .gitignore             | 1 +
 .packit.yaml           | 4 ++--
 README.packit          | 2 +-
 container-selinux.spec | 2 +-
 sources                | 2 +-
 5 files changed, 6 insertions(+), 5 deletions(-)

diff --git a/.gitignore b/.gitignore
index a935d69..e57030a 100644
--- a/.gitignore
+++ b/.gitignore
@@ -219,3 +219,4 @@
 /v2.221.1.tar.gz
 /v2.222.0.tar.gz
 /v2.224.0.tar.gz
+/v2.226.0.tar.gz
diff --git a/.packit.yaml b/.packit.yaml
index 6f84a58..0f6b9fd 100644
--- a/.packit.yaml
+++ b/.packit.yaml
@@ -67,9 +67,9 @@ jobs:
         message: "podman e2e tests failed on RHEL. @containers/packit-build please check."
     targets: &pr_test_targets_rhel
       epel-9-x86_64:
-        distros: [RHEL-9.2.0-Nightly]
+        distros: [RHEL-9.3.0-Nightly,RHEL-9.4.0-Nightly]
       epel-8-x86_64:
-        distros: [RHEL-8.10.0-Nightly]
+        distros: [RHEL-8.9.0-Nightly,RHEL-8.10.0-Nightly]
     identifier: podman_e2e_test_internal
     tmt_plan: "/plans/podman_e2e_test"
 
diff --git a/README.packit b/README.packit
index 327dfec..ef95206 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.83.0.post1.dev4+g46d87465.
+The file was generated using packit 0.87.0.
diff --git a/container-selinux.spec b/container-selinux.spec
index 3c995a5..7f2ac48 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.224.0
+Version: 2.226.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index 2eec748..d6bc57a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.224.0.tar.gz) = ab838c379aae99347c5d49ef84513c5fa1cd03faf1ab6b1dd4b6c571875c7c9df389abfb41ce0e2c2a57e14d11c47cbac85e2a6ad8004c2db6087849d91282aa
+SHA512 (v2.226.0.tar.gz) = 9decb066c62779336c22c027a2d3870c3dc1fe0afaa80ad59c4058c0030e0867352955d568e297f2258ba855a2be0d70c0d257cb64543b8726ff0755d63e95f8

From a764e81d0152f214675db09f50771da68e308541 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Thu, 21 Dec 2023 15:50:54 +0000
Subject: [PATCH 05/13] [packit] 2.227.0 upstream release

Upstream tag: v2.227.0
Upstream commit: 289df825
---
 .gitignore             | 1 +
 README.packit          | 2 +-
 container-selinux.spec | 2 +-
 sources                | 2 +-
 4 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index e57030a..a6ea623 100644
--- a/.gitignore
+++ b/.gitignore
@@ -220,3 +220,4 @@
 /v2.222.0.tar.gz
 /v2.224.0.tar.gz
 /v2.226.0.tar.gz
+/v2.227.0.tar.gz
diff --git a/README.packit b/README.packit
index ef95206..f27b296 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.87.0.
+The file was generated using packit 0.87.1.post1.dev11+gd1f7091b.
diff --git a/container-selinux.spec b/container-selinux.spec
index 7f2ac48..0aa2346 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.226.0
+Version: 2.227.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index d6bc57a..3b13bad 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.226.0.tar.gz) = 9decb066c62779336c22c027a2d3870c3dc1fe0afaa80ad59c4058c0030e0867352955d568e297f2258ba855a2be0d70c0d257cb64543b8726ff0755d63e95f8
+SHA512 (v2.227.0.tar.gz) = 604f6e8be89efb1dc6b70596149ea8cdd36958125dc740e3468757e732d452dda8b786b7d593bff099fb80fada369e54118a6d9e3eff0cdae2c15ac22c4acf04

From 24d9b07844b0d313e7059fc520ce2d287d9836ee Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Thu, 11 Jan 2024 03:12:58 +0000
Subject: [PATCH 06/13] [packit] 2.228.0 upstream release

Upstream tag: v2.228.0
Upstream commit: 48c2b45f
---
 .gitignore             | 1 +
 README.packit          | 2 +-
 container-selinux.spec | 3 ++-
 sources                | 2 +-
 4 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index a6ea623..5d86517 100644
--- a/.gitignore
+++ b/.gitignore
@@ -221,3 +221,4 @@
 /v2.224.0.tar.gz
 /v2.226.0.tar.gz
 /v2.227.0.tar.gz
+/v2.228.0.tar.gz
diff --git a/README.packit b/README.packit
index f27b296..8c508a5 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.87.1.post1.dev11+gd1f7091b.
+The file was generated using packit 0.88.0.
diff --git a/container-selinux.spec b/container-selinux.spec
index 0aa2346..689dc58 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.227.0
+Version: 2.228.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
@@ -71,6 +71,7 @@ sed -i 's/^install: man/install:/' Makefile
 sed -i 's/watch watch_reads//' container.if
 sed -i 's/watch watch_reads//' container.te
 sed -i '/sysfs_t:dir watch/d' container.te
+sed -i '/fifo_file watch/d' container.te
 %endif
 
 %if %{defined no_systemd_chat_resolved}
diff --git a/sources b/sources
index 3b13bad..56eb602 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.227.0.tar.gz) = 604f6e8be89efb1dc6b70596149ea8cdd36958125dc740e3468757e732d452dda8b786b7d593bff099fb80fada369e54118a6d9e3eff0cdae2c15ac22c4acf04
+SHA512 (v2.228.0.tar.gz) = b6dcfdc7044d491c15fe582af7cd2a653318ccb0d793556a7222620b5d3d1270d6d514cb9fae83d8f9e8300c5a3a8aee3c9bf69d68f8955b3f87cc20fb035f97

From 04c5c7de7209a8950a4cd8169e436a63c24cc955 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Thu, 18 Jan 2024 02:52:10 +0000
Subject: [PATCH 07/13] [packit] 2.228.1 upstream release

Upstream tag: v2.228.1
Upstream commit: d733187b
---
 .gitignore             | 1 +
 README.packit          | 2 +-
 container-selinux.spec | 2 +-
 sources                | 2 +-
 4 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 5d86517..755ae26 100644
--- a/.gitignore
+++ b/.gitignore
@@ -222,3 +222,4 @@
 /v2.226.0.tar.gz
 /v2.227.0.tar.gz
 /v2.228.0.tar.gz
+/v2.228.1.tar.gz
diff --git a/README.packit b/README.packit
index 8c508a5..115b422 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.88.0.
+The file was generated using packit 0.88.0.post1.dev4+gc070191b.
diff --git a/container-selinux.spec b/container-selinux.spec
index 689dc58..efca51a 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.228.0
+Version: 2.228.1
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index 56eb602..ebebf32 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.228.0.tar.gz) = b6dcfdc7044d491c15fe582af7cd2a653318ccb0d793556a7222620b5d3d1270d6d514cb9fae83d8f9e8300c5a3a8aee3c9bf69d68f8955b3f87cc20fb035f97
+SHA512 (v2.228.1.tar.gz) = d746a9d843c6bbe9cec0d7bb4ab7de4c791f12d82cc2f95aa52b225729d2a0933019a4d588d8b565e92aaaf04a0e967a5db3d50caded4b3f446bc122e841da03

From 1bf5dfd4e040bbaa86bd63aeaf96e2bc69079e22 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Mon, 22 Jan 2024 12:55:08 +0000
Subject: [PATCH 08/13] [packit] 2.229.0 upstream release

Upstream tag: v2.229.0
Upstream commit: eac57925
---
 .gitignore             | 1 +
 container-selinux.spec | 2 +-
 sources                | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index 755ae26..ceb3a01 100644
--- a/.gitignore
+++ b/.gitignore
@@ -223,3 +223,4 @@
 /v2.227.0.tar.gz
 /v2.228.0.tar.gz
 /v2.228.1.tar.gz
+/v2.229.0.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index efca51a..70a34f3 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.228.1
+Version: 2.229.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index ebebf32..05ff519 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.228.1.tar.gz) = d746a9d843c6bbe9cec0d7bb4ab7de4c791f12d82cc2f95aa52b225729d2a0933019a4d588d8b565e92aaaf04a0e967a5db3d50caded4b3f446bc122e841da03
+SHA512 (v2.229.0.tar.gz) = 1341e0a6996d1ff2b06a0095f6720595f0775dff27f1f45702b3e03ea78f3b45708f55400b4dc8bfc4586efec4f72528512e8fbe461629a55a18936f8e6df30d

From d287f2913c4dd5654d6b912ccf93386889a005a9 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Wed, 28 Feb 2024 15:07:04 +0000
Subject: [PATCH 09/13] [packit] 2.229.1 upstream release

Upstream tag: v2.229.1
Upstream commit: a023e9ee
---
 .gitignore             | 1 +
 README.packit          | 2 +-
 container-selinux.spec | 2 +-
 sources                | 2 +-
 4 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index ceb3a01..dd028fd 100644
--- a/.gitignore
+++ b/.gitignore
@@ -224,3 +224,4 @@
 /v2.228.0.tar.gz
 /v2.228.1.tar.gz
 /v2.229.0.tar.gz
+/v2.229.1.tar.gz
diff --git a/README.packit b/README.packit
index 115b422..31341b6 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.88.0.post1.dev4+gc070191b.
+The file was generated using packit 0.93.0.
diff --git a/container-selinux.spec b/container-selinux.spec
index 70a34f3..3372761 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.229.0
+Version: 2.229.1
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index 05ff519..9c53c37 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.229.0.tar.gz) = 1341e0a6996d1ff2b06a0095f6720595f0775dff27f1f45702b3e03ea78f3b45708f55400b4dc8bfc4586efec4f72528512e8fbe461629a55a18936f8e6df30d
+SHA512 (v2.229.1.tar.gz) = 19a3434093c1e30ae4e09988169435489c054f5eb9e0fb2a6ddd511da1393340913abbc5d848da280dfff1b314b1ee88bdff8092e59c51da839ca8e0bead531e

From 17d62c73a0ae964db267c451307e743985e1c333 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Sat, 2 Mar 2024 18:43:34 +0000
Subject: [PATCH 10/13] [packit] 2.230.0 upstream release

Upstream tag: v2.230.0
Upstream commit: 5cec8532
---
 .gitignore             | 1 +
 container-selinux.spec | 2 +-
 sources                | 2 +-
 3 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.gitignore b/.gitignore
index dd028fd..c22fbd6 100644
--- a/.gitignore
+++ b/.gitignore
@@ -225,3 +225,4 @@
 /v2.228.1.tar.gz
 /v2.229.0.tar.gz
 /v2.229.1.tar.gz
+/v2.230.0.tar.gz
diff --git a/container-selinux.spec b/container-selinux.spec
index 3372761..2aea4cd 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -33,7 +33,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.229.1
+Version: 2.230.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/sources b/sources
index 9c53c37..17706d2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.229.1.tar.gz) = 19a3434093c1e30ae4e09988169435489c054f5eb9e0fb2a6ddd511da1393340913abbc5d848da280dfff1b314b1ee88bdff8092e59c51da839ca8e0bead531e
+SHA512 (v2.230.0.tar.gz) = 6534fb6e1360b6e64d6e49e674a976e711f42b8b75b0ad1dffb35f870e2ccf9fcfe38de5e4f695a7e2490c6fe880c36bb3c17c1510e4758d0d3aa877dea719a8

From 7c047159cfb9c6f691ae23a36ac56405adbfe6e5 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Wed, 24 Apr 2024 14:31:31 +0000
Subject: [PATCH 11/13] Update to 2.231.0 upstream release

- Resolves: rhbz#2276827

Upstream tag: v2.231.0
Upstream commit: 5d983412

Commit authored by Packit automation (https://packit.dev/)
---
 .gitignore             |  1 +
 .packit.yaml           |  4 ++--
 README.packit          |  2 +-
 container-selinux.spec | 14 +++++++++++++-
 sources                |  2 +-
 5 files changed, 18 insertions(+), 5 deletions(-)

diff --git a/.gitignore b/.gitignore
index c22fbd6..07fedca 100644
--- a/.gitignore
+++ b/.gitignore
@@ -226,3 +226,4 @@
 /v2.229.0.tar.gz
 /v2.229.1.tar.gz
 /v2.230.0.tar.gz
+/v2.231.0.tar.gz
diff --git a/.packit.yaml b/.packit.yaml
index 0f6b9fd..b066cb5 100644
--- a/.packit.yaml
+++ b/.packit.yaml
@@ -67,9 +67,9 @@ jobs:
         message: "podman e2e tests failed on RHEL. @containers/packit-build please check."
     targets: &pr_test_targets_rhel
       epel-9-x86_64:
-        distros: [RHEL-9.3.0-Nightly,RHEL-9.4.0-Nightly]
+        distros: [RHEL-9.4.0-Nightly,RHEL-9-Nightly]
       epel-8-x86_64:
-        distros: [RHEL-8.9.0-Nightly,RHEL-8.10.0-Nightly]
+        distros: [RHEL-8.9.0-Nightly,RHEL-8-Nightly]
     identifier: podman_e2e_test_internal
     tmt_plan: "/plans/podman_e2e_test"
 
diff --git a/README.packit b/README.packit
index 31341b6..bee8d88 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.93.0.
+The file was generated using packit 0.95.0.
diff --git a/container-selinux.spec b/container-selinux.spec
index 2aea4cd..87bd464 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -18,6 +18,14 @@
 %global _selinux_policy_version 3.14.3-80.el8
 %endif
 
+# RHEL < 10 and Fedora < 40 use file context entries in /var/run
+%if %{defined rhel} && 0%{?rhel} < 10
+%define legacy_var_run 1
+%endif
+%if %{defined fedora} && 0%{?fedora} < 40
+%define legacy_var_run 1
+%endif
+
 # https://github.com/containers/container-selinux/issues/203
 %if %{!defined fedora} && %{!defined rhel} || %{defined fedora} && 0%{?fedora} <= 37 || %{defined rhel} && 0%{?rhel} <= 9
 %define no_user_namespace 1
@@ -33,7 +41,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.230.0
+Version: 2.231.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
@@ -82,6 +90,10 @@ sed -i '/^systemd_chat_resolved/d' container.te
 sed -i '/user_namespace/d' container.te
 %endif
 
+%if %{defined legacy_var_run}
+sed -i 's|^/run/|/var/run/|' container.fc
+%endif
+
 %build
 make
 
diff --git a/sources b/sources
index 17706d2..2755628 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.230.0.tar.gz) = 6534fb6e1360b6e64d6e49e674a976e711f42b8b75b0ad1dffb35f870e2ccf9fcfe38de5e4f695a7e2490c6fe880c36bb3c17c1510e4758d0d3aa877dea719a8
+SHA512 (v2.231.0.tar.gz) = 1e1cf48dda96e72330719ec6b679cbb832e002903c94afee3d3a4754196712026a050bbf619e9b0fdba6efbd1c56aaf1e687cd0436cc3386ac23d5b5a83f6352

From 09f18805d119e62305602e61ddffd3a7c06ba6ec Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Mon, 10 Jun 2024 17:33:51 +0000
Subject: [PATCH 12/13] Update to 2.232.1 upstream release

Upstream tag: v2.232.1
Upstream commit: 4ff1a398

Commit authored by Packit automation (https://packit.dev/)
---
 .fmf/version           |   1 +
 .gitignore             |   1 +
 .packit.yaml           | 113 +++++++++++++++++++++++++++--------------
 README.packit          |   2 +-
 container-selinux.spec |  35 ++++---------
 gating.yaml            |   6 +++
 plans/all.fmf          |  20 ++++++++
 sources                |   2 +-
 test/Makefile          |  23 +++++++++
 test/main.fmf          |  29 +++++++++++
 test/podman-tests.sh   | 104 +++++++++++++++++++++++++++++++++++++
 11 files changed, 270 insertions(+), 66 deletions(-)
 create mode 100644 .fmf/version
 create mode 100644 plans/all.fmf
 create mode 100644 test/Makefile
 create mode 100644 test/main.fmf
 create mode 100644 test/podman-tests.sh

diff --git a/.fmf/version b/.fmf/version
new file mode 100644
index 0000000..d00491f
--- /dev/null
+++ b/.fmf/version
@@ -0,0 +1 @@
+1
diff --git a/.gitignore b/.gitignore
index 07fedca..c32ba2d 100644
--- a/.gitignore
+++ b/.gitignore
@@ -227,3 +227,4 @@
 /v2.229.1.tar.gz
 /v2.230.0.tar.gz
 /v2.231.0.tar.gz
+/v2.232.1.tar.gz
diff --git a/.packit.yaml b/.packit.yaml
index b066cb5..4b6cb92 100644
--- a/.packit.yaml
+++ b/.packit.yaml
@@ -2,16 +2,42 @@
 # See the documentation for more information:
 # https://packit.dev/docs/configuration/
 
-specfile_path: rpm/container-selinux.spec
+downstream_package_name: container-selinux
 upstream_tag_template: v{version}
 
+# Ref: https://packit.dev/docs/configuration#files_to_sync
+files_to_sync:
+  - src: rpm/gating.yaml
+    dest: gating.yaml
+  - src: plans/
+    dest: plans/
+    delete: true
+  - src: test/
+    dest: test/
+    delete: true
+  - src: .fmf/
+    dest: .fmf/
+    delete: true
+  - .packit.yaml
+
+packages:
+  container-selinux-fedora:
+    pkg_tool: fedpkg
+    specfile_path: rpm/container-selinux.spec
+  container-selinux-centos:
+    pkg_tool: centpkg
+    specfile_path: rpm/container-selinux.spec
+  container-selinux-rhel:
+    specfile_path: rpm/container-selinux.spec
+
 srpm_build_deps:
   - make
 
 jobs:
   - job: copr_build
     trigger: pull_request
-    notifications:
+    packages: [container-selinux-fedora]
+    notifications: &copr_build_failure_notification
       failure_comment:
         message: "Ephemeral COPR build failed. @containers/packit-build please check."
     enable_net: true
@@ -19,13 +45,29 @@ jobs:
     targets:
       - fedora-all
       - fedora-eln
+
+  - job: copr_build
+    trigger: pull_request
+    packages: [container-selinux-centos]
+    notifications: *copr_build_failure_notification
+    enable_net: true
+    targets:
+      - centos-stream-9
+      - centos-stream-10
+
+  - job: copr_build
+    trigger: pull_request
+    packages: [container-selinux-rhel]
+    notifications: *copr_build_failure_notification
+    enable_net: true
+    targets:
       - epel-9
-      - epel-8
 
   # Run on commit to main branch
   # Build targets managed in copr settings
   - job: copr_build
     trigger: commit
+    packages: [container-selinux-fedora]
     notifications:
       failure_comment:
         message: "podman-next COPR build failed. @containers/packit-build please check."
@@ -35,67 +77,60 @@ jobs:
     enable_net: true
 
   # All tests specified in the `/plans/` subdir
-  # Podman e2e tests for Fedora and CentOS Stream
+  # Tests for Fedora
   - job: tests
     trigger: pull_request
-    notifications:
+    packages: [container-selinux-fedora]
+    notifications: &test_failure_notification
       failure_comment:
-        message: "podman e2e tests failed. @containers/packit-build please check."
-    targets: &pr_test_targets
+        message: "Tests failed. @containers/packit-build please check."
+    targets:
       - fedora-all
-      - epel-9
-      - epel-8
-    identifier: podman_e2e_test
-    tmt_plan: "/plans/podman_e2e_test"
 
-  # Podman system tests for Fedora and CentOS Stream
+  # Tests for CentOS Stream
   - job: tests
     trigger: pull_request
-    notifications:
-      failure_comment:
-        message: "podman system tests failed. @containers/packit-build please check."
-    targets: *pr_test_targets
-    identifier: podman_system_test
-    tmt_plan: "/plans/podman_system_test"
+    packages: [container-selinux-centos]
+    notifications: *test_failure_notification
+    targets:
+      - centos-stream-9
+      - centos-stream-10
 
-  # Podman e2e tests for RHEL
+  # Tests for RHEL
   - job: tests
     trigger: pull_request
+    packages: [container-selinux-rhel]
     use_internal_tf: true
-    notifications:
-      failure_comment:
-        message: "podman e2e tests failed on RHEL. @containers/packit-build please check."
-    targets: &pr_test_targets_rhel
+    notifications: *test_failure_notification
+    targets:
       epel-9-x86_64:
         distros: [RHEL-9.4.0-Nightly,RHEL-9-Nightly]
-      epel-8-x86_64:
-        distros: [RHEL-8.9.0-Nightly,RHEL-8-Nightly]
-    identifier: podman_e2e_test_internal
-    tmt_plan: "/plans/podman_e2e_test"
-
-  # Podman system tests for RHEL
-  - job: tests
-    trigger: pull_request
-    use_internal_tf: true
-    notifications:
-      failure_comment:
-        message: "podman system tests failed on RHEL. @containers/packit-build please check."
-    targets: *pr_test_targets_rhel
-    identifier: podman_system_test_internal
-    tmt_plan: "/plans/podman_system_test"
+      # Use centos-stream-10 until we have epel-10
+      # TODO: Enable after RHEL-10 gets selinux-policy >= 40.13.1 which is
+      # already on CentOS Stream 10.
+      #centos-stream-10-x86_64:
+        #  distros: [RHEL-10-Beta-Nightly]
 
   - job: propose_downstream
     trigger: release
-    update_release: false
+    packages: [container-selinux-fedora]
     dist_git_branches:
       - fedora-all
 
+  - job: propose_downstream
+    trigger: release
+    packages: [container-selinux-centos]
+    dist_git_branches:
+      - c10s
+
   - job: koji_build
     trigger: commit
+    packages: [container-selinux-fedora]
     dist_git_branches:
       - fedora-all
 
   - job: bodhi_update
     trigger: commit
+    packages: [container-selinux-fedora]
     dist_git_branches:
       - fedora-branched # rawhide updates are created automatically
diff --git a/README.packit b/README.packit
index bee8d88..d2b528d 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.95.0.
+The file was generated using packit 0.97.1.post1.dev6+gc8c0314a.
diff --git a/container-selinux.spec b/container-selinux.spec
index 87bd464..a56b428 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -11,29 +11,24 @@
 # Format must contain '$x' somewhere to do anything useful
 %global _format() export %1=""; for x in %{modulenames}; do %1+=%2; %1+=" "; done;
 
-# RHEL 8 doesn't allow watch and systemd_chat_resolved
-%if %{defined rhel} && 0%{?rhel} == 8
-%define no_watch 1
-%define no_systemd_chat_resolved 1
-%global _selinux_policy_version 3.14.3-80.el8
-%endif
-
 # RHEL < 10 and Fedora < 40 use file context entries in /var/run
-%if %{defined rhel} && 0%{?rhel} < 10
-%define legacy_var_run 1
-%endif
-%if %{defined fedora} && 0%{?fedora} < 40
+%if %{defined rhel} && 0%{?rhel} < 10 || %{defined fedora} && 0%{?fedora} < 40
 %define legacy_var_run 1
 %endif
 
 # https://github.com/containers/container-selinux/issues/203
-%if %{!defined fedora} && %{!defined rhel} || %{defined fedora} && 0%{?fedora} <= 37 || %{defined rhel} && 0%{?rhel} <= 9
+%if %{!defined fedora} && %{!defined rhel} || %{defined rhel} && 0%{?rhel} <= 9
 %define no_user_namespace 1
 %endif
 
+# copr_build is more intuitive than copr_username
+%if %{defined copr_username}
+%define copr_build 1
+%endif
+
 Name: container-selinux
 # Set different Epochs for copr and koji
-%if %{defined copr_username}
+%if %{defined copr_build}
 Epoch: 102
 %else
 Epoch: 2
@@ -41,7 +36,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.231.0
+Version: 2.232.1
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
@@ -75,17 +70,6 @@ SELinux policy modules for use with container runtimes.
 sed -i 's/^man: install-policy/man:/' Makefile
 sed -i 's/^install: man/install:/' Makefile
 
-%if %{defined no_watch}
-sed -i 's/watch watch_reads//' container.if
-sed -i 's/watch watch_reads//' container.te
-sed -i '/sysfs_t:dir watch/d' container.te
-sed -i '/fifo_file watch/d' container.te
-%endif
-
-%if %{defined no_systemd_chat_resolved}
-sed -i '/^systemd_chat_resolved/d' container.te
-%endif
-
 %if %{defined no_user_namespace}
 sed -i '/user_namespace/d' container.te
 %endif
@@ -138,6 +122,7 @@ fi
 %{_datadir}/selinux/*
 %dir %{_datadir}/containers/selinux
 %{_datadir}/containers/selinux/contexts
+%dir %{_datadir}/udica
 %dir %{_datadir}/udica/templates/
 %{_datadir}/udica/templates/*
 # Ref: https://bugzilla.redhat.com/show_bug.cgi?id=2209120
diff --git a/gating.yaml b/gating.yaml
index c2182c7..dbb1d91 100644
--- a/gating.yaml
+++ b/gating.yaml
@@ -4,3 +4,9 @@ product_versions:
 decision_context: bodhi_update_push_stable
 rules:
   - !PassingTestCaseRule {test_case_name: fedora-ci.koji-build.tier0.functional}
+
+--- !Policy
+product_versions:
+  - rhel-*
+decision_context: osci_compose_gate
+rules: []
diff --git a/plans/all.fmf b/plans/all.fmf
new file mode 100644
index 0000000..b6ec398
--- /dev/null
+++ b/plans/all.fmf
@@ -0,0 +1,20 @@
+discover:
+    how: fmf
+execute:
+    how: tmt
+
+/upstream:
+    summary: Run SELinux specific Podman tests on upstream PRs
+    discover+:
+        filter: tag:upstream
+    adjust+:
+        enabled: false
+        when: initiator is not defined or initiator != packit
+
+/downstream:
+    summary: Run SELinux specific Podman e2e tests on bodhi / errata and dist-git PRs
+    discover+:
+        filter: tag:downstream
+    adjust+:
+        enabled: false
+        when: initiator == packit
diff --git a/sources b/sources
index 2755628..07ddcc7 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.231.0.tar.gz) = 1e1cf48dda96e72330719ec6b679cbb832e002903c94afee3d3a4754196712026a050bbf619e9b0fdba6efbd1c56aaf1e687cd0436cc3386ac23d5b5a83f6352
+SHA512 (v2.232.1.tar.gz) = babaf5f65b639493482392674717284574859e4bbb03e897843265708f4f5cceeb260712cdff09771076d99c18aa89718c0e95dc33839e72e809de9e80079ae2
diff --git a/test/Makefile b/test/Makefile
new file mode 100644
index 0000000..083ca93
--- /dev/null
+++ b/test/Makefile
@@ -0,0 +1,23 @@
+.PHONY: basic_check
+basic_check:
+	semodule --list=full | grep container
+	semodule -B
+
+.PHONY: podman_e2e_test_upstream
+podman_e2e_test_upstream:
+	bash ./podman-tests.sh e2e upstream
+
+.PHONY: podman_e2e_test_downstream
+podman_e2e_test_downstream:
+	bash ./podman-tests.sh e2e downstream
+
+.PHONY: podman_system_test_upstream
+podman_system_test_upstream:
+	bash ./podman-tests.sh system upstream
+
+.PHONY: podman_system_test_downstream
+podman_system_test_downstream:
+	bash ./podman-tests.sh system downstream
+
+clean:
+	rm -rf podman-*dev* podman.spec
diff --git a/test/main.fmf b/test/main.fmf
new file mode 100644
index 0000000..6543521
--- /dev/null
+++ b/test/main.fmf
@@ -0,0 +1,29 @@
+# Only common dependencies that are NOT required to run podman-tests.sh are
+# specified here. Everything else is in podman-tests.sh.
+require:
+    - cpio
+    - make
+    - policycoreutils
+
+/basic_check:
+    summary: Run basic checks
+    tag: [ upstream, downstream ]
+    test: make basic_check
+
+/upstream:
+    tag: upstream
+/upstream/podman_e2e_test:
+    summary: Run SELinux specific Podman e2e tests on upstream PRs
+    test: make podman_e2e_test_upstream
+/upstream/podman_system_test:
+    summary: Run SELinux specific Podman system tests on upstream PRs
+    test: make podman_system_test_upstream
+
+/downstream:
+    tag: downstream
+/downstream/podman_e2e_test:
+    summary: Run SELinux specific Podman e2e tests on downstream bodhi / errata and dist-git PRs
+    test: make podman_e2e_test_downstream
+/downstream/podman_system_test:
+    summary: Run SELinux specific Podman system tests on downstream bodhi / errata and dist-git PRs
+    test: make podman_system_test_downstream
diff --git a/test/podman-tests.sh b/test/podman-tests.sh
new file mode 100644
index 0000000..50a29e2
--- /dev/null
+++ b/test/podman-tests.sh
@@ -0,0 +1,104 @@
+#!/usr/bin/env bash
+
+set -exo pipefail
+
+if [[ "$(id -u)" -ne 0 ]];then
+    echo "Please run as superuser"
+    exit 1
+fi
+
+if [[ -z "$1" ]]; then
+    echo -e "Usage: podman-tests.sh TEST_TYPE STREAM\nTEST_TYPE can be 'e2e' or 'system'\nSTREAM can be 'upstream' or 'downstream'"
+    exit 1
+fi
+
+TEST_TYPE=$1
+STREAM=$2
+
+# `rhel` macro exists on RHEL, CentOS Stream, and Fedora ELN
+# `centos` macro exists only on CentOS Stream
+CENTOS_VERSION=$(rpm --eval '%{?centos}')
+RHEL_VERSION=$(rpm --eval '%{?rhel}')
+
+# For upstream tests, we need to test with podman and other packages from the
+# podman-next copr. For downstream tests (bodhi, errata), we don't need any
+# additional setup
+if [[ "$STREAM" == "upstream" ]]; then
+    # Use CentOS Stream 10 copr target for RHEL-10 until EPEL 10 becomes
+    # available
+    if [[ -n $CENTOS_VERSION || $RHEL_VERSION -ge 10 ]]; then
+        dnf -y copr enable rhcontainerbot/podman-next centos-stream-$CENTOS_VERSION
+    else
+        dnf -y copr enable rhcontainerbot/podman-next
+    fi
+    echo "priority=5" >> /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:rhcontainerbot:podman-next.repo
+fi
+
+# Remove testing-farm repos if they exist as these interfere with the packages
+# we want to install, especially when podman-next copr is involved
+rm -f /etc/yum.repos.d/tag-repository.repo
+
+# Fetch and extract latest podman source from the highest priority dnf repo
+# NOTE: On upstream pull-requests, the srpm will be fetched from the
+# podman-next copr while on bodhi updates, it will be fetched from Fedora's
+# official repos.
+PODMAN_DIR=$(mktemp -d)
+pushd $PODMAN_DIR
+
+# Download podman and podman-tests rpms, along with podman srpm
+dnf download podman podman-tests
+# Download srpm, srpm opts differ between dnf and dnf5
+rpm -q dnf5 && dnf download --srpm podman || dnf download --source podman
+
+# Ensure podman-tests RPM and podman SRPM version-release match
+# NOTE: podman RPM and podman-tests RPM matching is ensured by podman.spec so
+# matching podman-tests and podman srpm is sufficient here.
+PODMAN_TESTS_VERSION=$(ls podman-tests* | sed -e "s/.$(uname -m).rpm//" -e "s/podman-tests-//")
+PODMAN_SRPM_VERSION=$(ls podman*.src.rpm | sed -e "s/.src.rpm//" -e "s/podman-//")
+if [[ "$PODMAN_TESTS_VERSION" != "$PODMAN_SRPM_VERSION" ]]; then
+    echo "podman-tests and podman srpm version-release don't match"
+    exit 1
+fi
+
+# Install downloaded podman and podman-tests rpms
+dnf -y install ./podman*.$(uname -m).rpm
+
+# Extract and untar podman source from srpm
+rpm2cpio $(ls podman*.src.rpm) | cpio -di
+tar zxf *.tar.gz
+
+popd
+
+# Enable EPEL on RHEL/CentOS Stream envs to fetch bats
+if [[ -n $(rpm --eval '%{?rhel}') ]]; then
+    # Until EPEL 10 is available use epel-9 for all RHEL and CentOS Stream
+    dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
+    sed -i 's/$releasever/9/g' /etc/yum.repos.d/epel.repo
+fi
+
+# Install dependencies for running tests
+dnf -y install bats golang
+
+# Print versions of distro and installed packages
+cat /etc/redhat-release
+rpm -q bats container-selinux golang podman podman-tests selinux-policy
+
+if [[ "$TEST_TYPE" == "e2e" ]]; then
+    # /tmp is often unsufficient
+    export TMPDIR=/var/tmp
+
+    # dnf5 contains breaking changes
+    # Either of `dnf` OR `dnf5` will be installed, never both.
+    # To fetch srpm, dnf uses `--source`, dnf5 uses `--srpm`.
+    #rpm -q dnf5 && SRPM_OPTS="--srpm" || SRPM_OPTS="--source"
+
+    # Run podman e2e tests
+    pushd $PODMAN_DIR/podman-*/test/e2e
+    PODMAN_BINARY=/usr/bin/podman go test -v config.go config_amd64.go common_test.go libpod_suite_test.go run_selinux_test.go
+    popd
+fi
+
+if [[ "$TEST_TYPE" == "system" ]]; then
+    # Run podman system tests
+    bats /usr/share/podman/test/system/410-selinux.bats
+fi

From 0f2ad29a7b022d020002c46e5a0503919df36930 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Wed, 11 Sep 2024 14:01:08 +0000
Subject: [PATCH 13/13] Update to 2.233.0 upstream release

Upstream tag: v2.233.0
Upstream commit: cc5da8a9

Commit authored by Packit automation (https://packit.dev/)
---
 .gitignore             |  1 +
 .packit.yaml           | 29 ++++++++++++++++++++---------
 README.packit          |  2 +-
 container-selinux.spec |  2 +-
 plans/all.fmf          |  2 +-
 sources                |  2 +-
 test/Makefile          | 20 ++++++--------------
 test/main.fmf          | 26 +++++++++-----------------
 test/podman-tests.sh   | 33 ++++-----------------------------
 9 files changed, 44 insertions(+), 73 deletions(-)

diff --git a/.gitignore b/.gitignore
index c32ba2d..1217f78 100644
--- a/.gitignore
+++ b/.gitignore
@@ -228,3 +228,4 @@
 /v2.230.0.tar.gz
 /v2.231.0.tar.gz
 /v2.232.1.tar.gz
+/v2.233.0.tar.gz
diff --git a/.packit.yaml b/.packit.yaml
index 4b6cb92..2f048d0 100644
--- a/.packit.yaml
+++ b/.packit.yaml
@@ -9,6 +9,7 @@ upstream_tag_template: v{version}
 files_to_sync:
   - src: rpm/gating.yaml
     dest: gating.yaml
+    delete: true
   - src: plans/
     dest: plans/
     delete: true
@@ -51,7 +52,7 @@ jobs:
     packages: [container-selinux-centos]
     notifications: *copr_build_failure_notification
     enable_net: true
-    targets:
+    targets: &centos_targets
       - centos-stream-9
       - centos-stream-10
 
@@ -86,15 +87,23 @@ jobs:
         message: "Tests failed. @containers/packit-build please check."
     targets:
       - fedora-all
+    tf_extra_params:
+      environments:
+        - artifacts:
+          - type: repository-file
+            id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/fedora-$releasever/rhcontainerbot-podman-next-fedora-$releasever.repo
 
   # Tests for CentOS Stream
   - job: tests
     trigger: pull_request
     packages: [container-selinux-centos]
     notifications: *test_failure_notification
-    targets:
-      - centos-stream-9
-      - centos-stream-10
+    targets: *centos_targets
+    tf_extra_params:
+      environments:
+        - artifacts:
+          - type: repository-file
+            id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/centos-stream-$releasever/rhcontainerbot-podman-next-centos-stream-$releasever.repo
 
   # Tests for RHEL
   - job: tests
@@ -105,11 +114,13 @@ jobs:
     targets:
       epel-9-x86_64:
         distros: [RHEL-9.4.0-Nightly,RHEL-9-Nightly]
-      # Use centos-stream-10 until we have epel-10
-      # TODO: Enable after RHEL-10 gets selinux-policy >= 40.13.1 which is
-      # already on CentOS Stream 10.
-      #centos-stream-10-x86_64:
-        #  distros: [RHEL-10-Beta-Nightly]
+    tf_extra_params:
+      environments:
+        - artifacts:
+          - type: repository-file
+            id: https://copr.fedorainfracloud.org/coprs/rhcontainerbot/podman-next/repo/epel-$releasever/rhcontainerbot-podman-next-epel-$releasever.repo
+          - type: repository-file
+            id: https://src.fedoraproject.org/rpms/epel-release/raw/epel9/f/epel.repo
 
   - job: propose_downstream
     trigger: release
diff --git a/README.packit b/README.packit
index d2b528d..459869a 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 0.97.1.post1.dev6+gc8c0314a.
+The file was generated using packit 0.101.0.
diff --git a/container-selinux.spec b/container-selinux.spec
index a56b428..cc61060 100644
--- a/container-selinux.spec
+++ b/container-selinux.spec
@@ -36,7 +36,7 @@ Epoch: 2
 # Keep Version in upstream specfile at 0. It will be automatically set
 # to the correct value by Packit for copr and koji builds.
 # IGNORE this comment if you're looking at it in dist-git.
-Version: 2.232.1
+Version: 2.233.0
 Release: %autorelease
 License: GPL-2.0-only
 URL: https://github.com/containers/%{name}
diff --git a/plans/all.fmf b/plans/all.fmf
index b6ec398..9e0d10b 100644
--- a/plans/all.fmf
+++ b/plans/all.fmf
@@ -12,7 +12,7 @@ execute:
         when: initiator is not defined or initiator != packit
 
 /downstream:
-    summary: Run SELinux specific Podman e2e tests on bodhi / errata and dist-git PRs
+    summary: Run SELinux specific Podman tests on bodhi / errata and dist-git PRs
     discover+:
         filter: tag:downstream
     adjust+:
diff --git a/sources b/sources
index 07ddcc7..e8e9fbc 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (v2.232.1.tar.gz) = babaf5f65b639493482392674717284574859e4bbb03e897843265708f4f5cceeb260712cdff09771076d99c18aa89718c0e95dc33839e72e809de9e80079ae2
+SHA512 (v2.233.0.tar.gz) = f79380a3312cb57953bc1286ba7dcdbf29ab95ce72de79c5bac1eb6c4401d2bcb0c9875802c7198a9680af19affb34170581c609180408b21cc27cf680c3feb4
diff --git a/test/Makefile b/test/Makefile
index 083ca93..5fee1ea 100644
--- a/test/Makefile
+++ b/test/Makefile
@@ -3,21 +3,13 @@ basic_check:
 	semodule --list=full | grep container
 	semodule -B
 
-.PHONY: podman_e2e_test_upstream
-podman_e2e_test_upstream:
-	bash ./podman-tests.sh e2e upstream
+.PHONY: podman_e2e_test
+podman_e2e_test:
+	bash ./podman-tests.sh e2e
 
-.PHONY: podman_e2e_test_downstream
-podman_e2e_test_downstream:
-	bash ./podman-tests.sh e2e downstream
-
-.PHONY: podman_system_test_upstream
-podman_system_test_upstream:
-	bash ./podman-tests.sh system upstream
-
-.PHONY: podman_system_test_downstream
-podman_system_test_downstream:
-	bash ./podman-tests.sh system downstream
+.PHONY: podman_system_test
+podman_system_test:
+	bash ./podman-tests.sh system
 
 clean:
 	rm -rf podman-*dev* podman.spec
diff --git a/test/main.fmf b/test/main.fmf
index 6543521..8c30075 100644
--- a/test/main.fmf
+++ b/test/main.fmf
@@ -6,24 +6,16 @@ require:
     - policycoreutils
 
 /basic_check:
-    summary: Run basic checks
     tag: [ upstream, downstream ]
+    summary: Run basic checks
     test: make basic_check
 
-/upstream:
-    tag: upstream
-/upstream/podman_e2e_test:
-    summary: Run SELinux specific Podman e2e tests on upstream PRs
-    test: make podman_e2e_test_upstream
-/upstream/podman_system_test:
-    summary: Run SELinux specific Podman system tests on upstream PRs
-    test: make podman_system_test_upstream
+/podman_e2e_test:
+    tag: [ upstream, downstream ]
+    summary: Run SELinux specific Podman e2e tests
+    test: make podman_e2e_test
 
-/downstream:
-    tag: downstream
-/downstream/podman_e2e_test:
-    summary: Run SELinux specific Podman e2e tests on downstream bodhi / errata and dist-git PRs
-    test: make podman_e2e_test_downstream
-/downstream/podman_system_test:
-    summary: Run SELinux specific Podman system tests on downstream bodhi / errata and dist-git PRs
-    test: make podman_system_test_downstream
+/podman_system_test:
+    tag: [ upstream, downstream ]
+    summary: Run SELinux specific Podman system tests
+    test: make podman_system_test
diff --git a/test/podman-tests.sh b/test/podman-tests.sh
index 50a29e2..b758cc8 100644
--- a/test/podman-tests.sh
+++ b/test/podman-tests.sh
@@ -2,37 +2,19 @@
 
 set -exo pipefail
 
+cat /etc/redhat-release
+
 if [[ "$(id -u)" -ne 0 ]];then
     echo "Please run as superuser"
     exit 1
 fi
 
 if [[ -z "$1" ]]; then
-    echo -e "Usage: podman-tests.sh TEST_TYPE STREAM\nTEST_TYPE can be 'e2e' or 'system'\nSTREAM can be 'upstream' or 'downstream'"
+    echo -e "Usage: $(basename ${BASH_SOURCE[0]}) TEST_TYPE\nTEST_TYPE can be 'e2e' or 'system'\n"
     exit 1
 fi
 
 TEST_TYPE=$1
-STREAM=$2
-
-# `rhel` macro exists on RHEL, CentOS Stream, and Fedora ELN
-# `centos` macro exists only on CentOS Stream
-CENTOS_VERSION=$(rpm --eval '%{?centos}')
-RHEL_VERSION=$(rpm --eval '%{?rhel}')
-
-# For upstream tests, we need to test with podman and other packages from the
-# podman-next copr. For downstream tests (bodhi, errata), we don't need any
-# additional setup
-if [[ "$STREAM" == "upstream" ]]; then
-    # Use CentOS Stream 10 copr target for RHEL-10 until EPEL 10 becomes
-    # available
-    if [[ -n $CENTOS_VERSION || $RHEL_VERSION -ge 10 ]]; then
-        dnf -y copr enable rhcontainerbot/podman-next centos-stream-$CENTOS_VERSION
-    else
-        dnf -y copr enable rhcontainerbot/podman-next
-    fi
-    echo "priority=5" >> /etc/yum.repos.d/_copr:copr.fedorainfracloud.org:rhcontainerbot:podman-next.repo
-fi
 
 # Remove testing-farm repos if they exist as these interfere with the packages
 # we want to install, especially when podman-next copr is involved
@@ -69,18 +51,11 @@ tar zxf *.tar.gz
 
 popd
 
-# Enable EPEL on RHEL/CentOS Stream envs to fetch bats
-if [[ -n $(rpm --eval '%{?rhel}') ]]; then
-    # Until EPEL 10 is available use epel-9 for all RHEL and CentOS Stream
-    dnf -y install https://dl.fedoraproject.org/pub/epel/epel-release-latest-9.noarch.rpm
-    sed -i 's/$releasever/9/g' /etc/yum.repos.d/epel.repo
-fi
-
 # Install dependencies for running tests
+# NOTE: bats will be fetched from Fedora repos on public testing-farm envs if EPEL repo is absent or disabled.
 dnf -y install bats golang
 
 # Print versions of distro and installed packages
-cat /etc/redhat-release
 rpm -q bats container-selinux golang podman podman-tests selinux-policy
 
 if [[ "$TEST_TYPE" == "e2e" ]]; then