From 1b779c7ee52940253e2152432d9424da44d23def Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Wed, 25 Mar 2026 20:03:49 +0000
Subject: [PATCH 1/5] Update to 1.27 upstream release

Upstream tag: 1.27
Upstream commit: a718a92c

Commit authored by Packit automation (https://packit.dev/)
---
 .gitignore     | 1 +
 .packit.yaml   | 9 +--------
 README.packit  | 2 +-
 crun.spec      | 2 +-
 plans/main.fmf | 8 ++++++++
 sources        | 2 +-
 6 files changed, 13 insertions(+), 11 deletions(-)

diff --git a/.gitignore b/.gitignore
index 62eb9bc..43dd47c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -102,3 +102,4 @@ crun-0.1.1.tar.gz
 /crun-1.25.tar.zst
 /crun-1.25.1.tar.zst
 /crun-1.26.tar.zst
+/crun-1.27.tar.zst
diff --git a/.packit.yaml b/.packit.yaml
index b7dc6ae..036c93f 100644
--- a/.packit.yaml
+++ b/.packit.yaml
@@ -101,14 +101,7 @@ jobs:
     trigger: pull_request
     packages: [crun-centos]
     notifications: *test_failure_notification
-    # TODO: Re-enable centos-stream-10-x86_64 once criu issues are solved
-    # Ref: https://github.com/containers/crun/pull/1758#issuecomment-2901772392
-    # Issue filed: https://github.com/containers/crun/issues/1759
-    #targets: *centos_copr_targets
-    targets:
-      - centos-stream-9-x86_64
-      - centos-stream-9-aarch64
-      - centos-stream-10-aarch64
+    targets: *centos_copr_targets
     tf_extra_params:
       environments:
         - artifacts:
diff --git a/README.packit b/README.packit
index 9bb65f0..1bb65ff 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 1.13.0.post1.dev2+g84134016c.
+The file was generated using packit 1.15.1.post1.dev6+g1fe6a01ee.
diff --git a/crun.spec b/crun.spec
index 5cfc631..4e1a653 100644
--- a/crun.spec
+++ b/crun.spec
@@ -39,7 +39,7 @@ Epoch: 102
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.26
+Version: 1.27
 Release: %autorelease
 URL: https://github.com/containers/%{name}
 Source0: %{url}/releases/download/%{version}/%{name}-%{version}.tar.zst
diff --git a/plans/main.fmf b/plans/main.fmf
index 7a4ae15..6fd7526 100644
--- a/plans/main.fmf
+++ b/plans/main.fmf
@@ -18,6 +18,14 @@ prepare:
         fi
         dnf -y upgrade --allowerasing
       order: 20
+
+    # TODO: Remove once https://issues.redhat.com/browse/RHEL-153064 is fixed.
+    - when: distro == centos-stream-9
+      how: install
+      package:
+        - iptables-legacy
+      order: 30
+
     - how: install
       package:
         - bats
diff --git a/sources b/sources
index 233ea40..f514fb8 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crun-1.26.tar.zst) = 0785af6095a26290f433c5739bea5d98a029c3f0e8efbeed420481849ebddd70acde6c1105133c392abf26bca90d232cced5e5994da7506d66a020a02c129fb3
+SHA512 (crun-1.27.tar.zst) = 89a2c6d894926f16afaee27fb6460bdfe7633c6716ace459d86c3adaa1f6e11cdfad3371ffc26d91d63185a2249ad56ff88272e459d5837524d820d945dd2878

From c781ed7f4f84dbdbe0e032a390507985e1a73351 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Tue, 21 Apr 2026 07:57:06 +0000
Subject: [PATCH 2/5] Update to 1.27.1 upstream release

Upstream tag: 1.27.1
Upstream commit: 3ec076b3

Commit authored by Packit automation (https://packit.dev/)
---
 .gitignore    | 1 +
 README.packit | 2 +-
 crun.spec     | 2 +-
 sources       | 2 +-
 4 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 43dd47c..b462bae 100644
--- a/.gitignore
+++ b/.gitignore
@@ -103,3 +103,4 @@ crun-0.1.1.tar.gz
 /crun-1.25.1.tar.zst
 /crun-1.26.tar.zst
 /crun-1.27.tar.zst
+/crun-1.27.1.tar.zst
diff --git a/README.packit b/README.packit
index 1bb65ff..7698114 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 1.15.1.post1.dev6+g1fe6a01ee.
+The file was generated using packit 1.15.3.post1.dev4+g553394da5.
diff --git a/crun.spec b/crun.spec
index 4e1a653..18c5e14 100644
--- a/crun.spec
+++ b/crun.spec
@@ -39,7 +39,7 @@ Epoch: 102
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.27
+Version: 1.27.1
 Release: %autorelease
 URL: https://github.com/containers/%{name}
 Source0: %{url}/releases/download/%{version}/%{name}-%{version}.tar.zst
diff --git a/sources b/sources
index f514fb8..5f47017 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crun-1.27.tar.zst) = 89a2c6d894926f16afaee27fb6460bdfe7633c6716ace459d86c3adaa1f6e11cdfad3371ffc26d91d63185a2249ad56ff88272e459d5837524d820d945dd2878
+SHA512 (crun-1.27.1.tar.zst) = 05892360219c2e04f3de5244b51656459fb4586a4352fee29b0165c4de93706e3969d4e9a5cf4f0e0e4028c0cd3ef3e23d845c8f020afb2eb8279f5984070aaa

From d2a8ea9c6a313e8b4bf49a38643cd4ff7a19f83e Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Wed, 27 May 2026 11:20:51 +0000
Subject: [PATCH 3/5] Update to 1.28 upstream release

Upstream tag: 1.28
Upstream commit: 54f16ffb

Commit authored by Packit automation (https://packit.dev/)
---
 .gitignore    |  1 +
 README.packit |  2 +-
 crun.spec     | 16 ++++------------
 sources       |  2 +-
 4 files changed, 7 insertions(+), 14 deletions(-)

diff --git a/.gitignore b/.gitignore
index b462bae..4fdf816 100644
--- a/.gitignore
+++ b/.gitignore
@@ -104,3 +104,4 @@ crun-0.1.1.tar.gz
 /crun-1.26.tar.zst
 /crun-1.27.tar.zst
 /crun-1.27.1.tar.zst
+/crun-1.28.tar.zst
diff --git a/README.packit b/README.packit
index 7698114..ead62b8 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 1.15.3.post1.dev4+g553394da5.
+The file was generated using packit 1.16.0.post1.dev6+g4581d2cd8.
diff --git a/crun.spec b/crun.spec
index 18c5e14..d1fc2d2 100644
--- a/crun.spec
+++ b/crun.spec
@@ -1,6 +1,6 @@
 %global krun_opts %{nil}
 %global wasmedge_opts %{nil}
-%global yajl_opts %{nil}
+%global blake3_opts --enable-embedded-blake3
 
 %if %{defined copr_username}
 %define copr_build 1
@@ -22,12 +22,6 @@
 
 %endif
 
-%if %{defined fedora} || (%{defined rhel} && 0%{?rhel} < 10)
-%global system_yajl 1
-%else
-%global yajl_opts --enable-embedded-yajl
-%endif
-
 Summary: OCI runtime written in C
 Name: crun
 %if %{defined copr_build}
@@ -39,7 +33,7 @@ Epoch: 102
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.27.1
+Version: 1.28
 Release: %autorelease
 URL: https://github.com/containers/%{name}
 Source0: %{url}/releases/download/%{version}/%{name}-%{version}.tar.zst
@@ -59,9 +53,7 @@ BuildRequires: libcap-devel
 BuildRequires: libkrun-devel
 %endif
 BuildRequires: systemd-devel
-%if %{defined system_yajl}
-BuildRequires: yajl-devel
-%endif
+BuildRequires: json-c-devel
 BuildRequires: libseccomp-devel
 BuildRequires: python3-libmount
 BuildRequires: libtool
@@ -110,7 +102,7 @@ Recommends: wasmedge
 
 %build
 ./autogen.sh
-./configure --disable-silent-rules %{krun_opts} %{wasmedge_opts} %{yajl_opts}
+./configure --disable-silent-rules %{krun_opts} %{wasmedge_opts} %{blake3_opts}
 %make_build
 
 %install
diff --git a/sources b/sources
index 5f47017..87ff8bd 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crun-1.27.1.tar.zst) = 05892360219c2e04f3de5244b51656459fb4586a4352fee29b0165c4de93706e3969d4e9a5cf4f0e0e4028c0cd3ef3e23d845c8f020afb2eb8279f5984070aaa
+SHA512 (crun-1.28.tar.zst) = 9a2ee5c53169e166f415bcd7713b03e0ce8ec007a6ec6409aa72a1339881efa0155338c1147dcf39fbce100888f3217cb6bab51f45d5a2656f7eef34dc4d1eef

From 1f88911b8f3d3d0e2944695a7b6f55cdad9dda48 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Fri, 7 Aug 2026 14:27:05 +0000
Subject: [PATCH 4/5] Update to 1.29 upstream release

Upstream tag: 1.29
Upstream commit: d66af6a0

Commit authored by Packit automation (https://packit.dev/)
---
 .gitignore                       |  1 +
 README.packit                    |  2 +-
 crun.spec                        |  2 +-
 sources                          |  2 +-
 tests/tmt/podman/system-test.fmf | 27 ++++++++++++++++++-----
 tests/tmt/podman/system-test.sh  | 38 +++++++++++++++++++++++++++-----
 6 files changed, 57 insertions(+), 15 deletions(-)

diff --git a/.gitignore b/.gitignore
index 4fdf816..0c6393e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -105,3 +105,4 @@ crun-0.1.1.tar.gz
 /crun-1.27.tar.zst
 /crun-1.27.1.tar.zst
 /crun-1.28.tar.zst
+/crun-1.29.tar.zst
diff --git a/README.packit b/README.packit
index ead62b8..ef5aa9d 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 1.16.0.post1.dev6+g4581d2cd8.
+The file was generated using packit 1.16.2.post1.dev6+g30936cda7.
diff --git a/crun.spec b/crun.spec
index d1fc2d2..00f040f 100644
--- a/crun.spec
+++ b/crun.spec
@@ -33,7 +33,7 @@ Epoch: 102
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.28
+Version: 1.29
 Release: %autorelease
 URL: https://github.com/containers/%{name}
 Source0: %{url}/releases/download/%{version}/%{name}-%{version}.tar.zst
diff --git a/sources b/sources
index 87ff8bd..05b8344 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crun-1.28.tar.zst) = 9a2ee5c53169e166f415bcd7713b03e0ce8ec007a6ec6409aa72a1339881efa0155338c1147dcf39fbce100888f3217cb6bab51f45d5a2656f7eef34dc4d1eef
+SHA512 (crun-1.29.tar.zst) = 535eb3a84dd3400ace359900fbd9d3404f353133979f6dd132ce2533cde277da318797aee676a8036639b637f92b54599081db4d6830b33f8a4343d386db28ae
diff --git a/tests/tmt/podman/system-test.fmf b/tests/tmt/podman/system-test.fmf
index 8df55c2..12954fa 100644
--- a/tests/tmt/podman/system-test.fmf
+++ b/tests/tmt/podman/system-test.fmf
@@ -1,7 +1,22 @@
-adjust:
-    duration: 10m
-    when: arch == aarch64
-
-summary: Run crun specific Podman tests
-test: bash ./system-test.sh
+summary: Run Podman system tests with crun
 tag: [ podman ]
+duration: 10m
+
+environment:
+    ROOTLESS_USER: testuser
+
+adjust:
+    - enabled: false
+      when: distro == centos-stream or distro == rhel
+    - duration: 15m
+      when: arch == aarch64
+
+/root:
+    tag+: [ root ]
+    summary: Run Podman system tests as root
+    test: bash ./system-test.sh
+
+/rootless:
+    tag+: [ rootless ]
+    summary: Run Podman system tests as rootless
+    test: bash ./system-test.sh rootless
diff --git a/tests/tmt/podman/system-test.sh b/tests/tmt/podman/system-test.sh
index 974f829..bdb304d 100644
--- a/tests/tmt/podman/system-test.sh
+++ b/tests/tmt/podman/system-test.sh
@@ -2,7 +2,7 @@
 
 set -exo pipefail
 
-if [[ "$(id -u)" -ne 0 ]];then
+if [[ "$(id -u)" -ne 0 ]]; then
     echo "Please run this script as superuser"
     exit 1
 fi
@@ -10,8 +10,34 @@ fi
 cat /etc/redhat-release
 rpm -q conmon containers-common crun podman podman-tests
 
-# Run crun specific podman tests
-bats -t /usr/share/podman/test/system/030-run.bats
-bats -t /usr/share/podman/test/system/075-exec.bats
-bats -t /usr/share/podman/test/system/280-update.bats
-bats -t /usr/share/podman/test/system/520-checkpoint.bats
+ROOTLESS_USER=${ROOTLESS_USER:-testuser}
+
+TESTS=(
+/usr/share/podman/test/system/030-run.bats
+/usr/share/podman/test/system/060-mount.bats
+/usr/share/podman/test/system/075-exec.bats
+/usr/share/podman/test/system/170-run-userns.bats
+/usr/share/podman/test/system/200-pod.bats
+/usr/share/podman/test/system/280-update.bats
+/usr/share/podman/test/system/400-unprivileged-access.bats
+/usr/share/podman/test/system/420-cgroups.bats
+/usr/share/podman/test/system/520-checkpoint.bats
+)
+
+# Filter out test files that do not exist in the installed version.
+existing_tests=()
+for t in "${TESTS[@]}"; do
+    if [[ -f $t ]]; then
+        existing_tests+=("$t")
+    fi
+done
+
+if [[ -z $1 ]]; then
+    bats -t "${existing_tests[@]}"
+elif [[ $1 == "rootless" ]]; then
+    if ! id "$ROOTLESS_USER" &>/dev/null; then
+        useradd "$ROOTLESS_USER"
+    fi
+    loginctl enable-linger "$ROOTLESS_USER"
+    su - "$ROOTLESS_USER" -c "bats -t ${existing_tests[*]}"
+fi

From 371da68c26023f1c9ab25077afa0e130511c1d23 Mon Sep 17 00:00:00 2001
From: Packit <hello@packit.dev>
Date: Thu, 13 Aug 2026 06:56:00 +0000
Subject: [PATCH 5/5] Update to 1.29.1 upstream release

Upstream tag: 1.29.1
Upstream commit: f0d911de

Commit authored by Packit automation (https://packit.dev/)
---
 .gitignore    | 1 +
 README.packit | 2 +-
 crun.spec     | 2 +-
 sources       | 2 +-
 4 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.gitignore b/.gitignore
index 0c6393e..0479248 100644
--- a/.gitignore
+++ b/.gitignore
@@ -106,3 +106,4 @@ crun-0.1.1.tar.gz
 /crun-1.27.1.tar.zst
 /crun-1.28.tar.zst
 /crun-1.29.tar.zst
+/crun-1.29.1.tar.zst
diff --git a/README.packit b/README.packit
index ef5aa9d..68a092a 100644
--- a/README.packit
+++ b/README.packit
@@ -1,3 +1,3 @@
 This repository is maintained by packit.
 https://packit.dev/
-The file was generated using packit 1.16.2.post1.dev6+g30936cda7.
+The file was generated using packit 1.16.2.post1.dev8+g69d783e81.
diff --git a/crun.spec b/crun.spec
index 00f040f..ac8e434 100644
--- a/crun.spec
+++ b/crun.spec
@@ -33,7 +33,7 @@ Epoch: 102
 # If that's what you're reading, Version must be 0, and will be updated by Packit for
 # copr and koji builds.
 # If you're reading this on dist-git, the version is automatically filled in by Packit.
-Version: 1.29
+Version: 1.29.1
 Release: %autorelease
 URL: https://github.com/containers/%{name}
 Source0: %{url}/releases/download/%{version}/%{name}-%{version}.tar.zst
diff --git a/sources b/sources
index 05b8344..a6cc16d 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crun-1.29.tar.zst) = 535eb3a84dd3400ace359900fbd9d3404f353133979f6dd132ce2533cde277da318797aee676a8036639b637f92b54599081db4d6830b33f8a4343d386db28ae
+SHA512 (crun-1.29.1.tar.zst) = d12ff1252b20fe8ac1015c7581fde3eabbefca396b8cd9c7fac94eb12606e7ace0c8f561651fa9983a7ae98ba1489c72da6d6aa563061faf1b274d5075ac22bd