November 2021 - Podman - Podman List Archives

by Michael Ivanov

Hallo! I'm trying to run my application in podman rootless container and I stumble on following problem: my program needs /proc/sys/fs/mqueue/msg_max to be at least 256, but in running container this value is just 10. When I try to specify this parameter while running the image (--sysctl 'fs.mqueue.msg_max=256') I get the following error: Error: open /proc/sys/fs/mqueue/msg_max: Permission denied: OCI permission denied and container is not created. My host where container is being run has this parameter set to 256. How can I expose current host setting for msg_max to my container? Best regards, -- \ / | | (OvO) | Михаил Иванов | (^^^) | | \^/ | E-mail: ivans(a)isle.spb.ru | ^ ^ | |

5 months

4
10
0 / 0

Blog solution for podman.io website

by Máirín Duffy

Hey, a couple of thoughts on the podman.io blog issue brought up during the last Podman community cabal call ( https://podman.io/community/meeting/notes/2021-11-18/) - Summary: Podman has a need for a low-overhead of posting blog posts; the current system involves other websites and platforms and is process-heavy. (Hopefully this is an accurate summary, lmk if not.) - One option would be to use wordpress which has a post-by-email feature... you have to keep the email you send the posts to secret / only share w people authorized to post / otherwise there is no overhead / process to getting posts live. Appears it may be possible to then import the wordpress RSS feed into the existing jekyll site with smtg like this https://github.com/MattKevan/Jekyll-feed-importer - Other option (perhaps better) - use antora instead of jekyll. GitHub pages supports antora, it lets you have a site generated from multi-repos, believe it would enable stuff like taking snippets from the podman repo's docs and pulling into the website in a diff repo. Could create another repo just for informal blog content, give everyone you'd ever want to post a blog full commit access just to that repo, antora can read in from that and use it to generate blog posts on website (and authors wouldn't need commit access to website) Relevant links: - WP post by email https://jetpack.com/support/post-by-email/ - Antora github pages support https://docs.antora.org/antora/2.3/publish-to-github-pages/ - Antora multi-repo functionality https://docs.antora.org/antora/2.3/features/#bring-together-content-from-... My experience is with Jekyll and not Antora but I am currently playing around with Antora to see if I can get a multi-repo proof-of-concept together. If someone more technically ept would like to help, let me know :) I am @duffy:fedora.im on Matrix and in the Podman channel! Le meas, ~m

2 years, 4 months

8
9
0 / 0

Container stopped running

by Ranbir

Hello, I'm running podmon on an up to date Rocky Linux 8 system. I'm trying to run a rootless container. Before my update to Rocky Linux 8.5, the rootless container was running just fine. After my update and reboot, I keep getting this error: Error: container_linux.go:380: starting container process caused: process_linux.go:545: container init caused: process_linux.go:508: setting cgroup config for procHooks process caused: open /sys/fs/cgroup/user.slice/user-1000.slice/user(a)1000.service/user.slice/ user- libpod_pod_a9292128fc778c6287e80ff71d5e2ee1320b3395dc48a7e31af1db77cc7f 695a.slice/libpod- a7de373d2fef8f5ea232c09e1553923ff1968ff4caef156b997d26910a2d9558.scope/ pids.max: no such file or directory: OCI runtime attempted to invoke a command that was not found I did enable lingering for the "containers" user and created the file /etc/systemd/system/user@.service.d/delegate.conf. I've run "systemctl daemon-reload" after rebooting. I'm also exporting XDG_RUNTIME_DIR in the user's .bashrc. None of this seems to be working now, though it did stop similar errors before the update. Does anyone know why the pids.max cgroup isn't being created now? -- Ranbir

2 years, 4 months

2
7
0 / 0

centos stream 9 - error - error loading cached network

by lejeczek

Hi guys. I wonder if that might be stream 9 specific, as I failed to find anything concrete on this: -> $ podman run -dt --security-opt label=disable --privileged --restart=always --network cni-podman --hostname gluster1-whale --ip 10.1.1.96 --mac-address 2A:7C:AA:ED:A2:B1 --systemd true --name centos centos/systemd ERRO[0000] error loading cached network config: network "cni-podman" not found in CNI cache WARN[0000] falling back to loading from existing plugins on disk ERRO[0000] Error tearing down partially created network namespace for container aa244a9ab57ce903973ae10d2bec63e6d0556cb7a4213e731497273b55267164: error removing pod centos_centos from CNI network "cni-podman": json: cannot unmarshal object into Go struct field IPAMConfig.ipam.ranges of type allocator.RangeSet Error: error configuring network namespace for container aa244a9ab57ce903973ae10d2bec63e6d0556cb7a4213e731497273b55267164: error adding pod centos_centos to CNI network "cni-podman": json: cannot unmarshal object into Go struct field IPAMConfig.ipam.ranges of type allocator.RangeSet -> $ podman network inspect cni-podman [ { "cniVersion": "0.4.0", "name": "cni-podman", "plugins": [ { "bridge": "nm-bridge101", "ipam": { "ranges": [ { "gateway": "10.1.1.254", "rangeEnd": "10.1.1.98", "rangeStart": "10.1.1.96", "subnet": "10.1.1.0/24" } ], "type": "host-local" }, "type": "bridge" }, { "capabilities": { "mac": true }, "type": "tuning" } ] } ] all comments very appreciated. many thanks, L.

2 years, 4 months

1
0
0 / 0

/etc/resolv.conf symlink problem

by Michael Ivanov

Greetings, On my system (debian unstable, podman 3.4.2) /etc/resolv.conf is a symlink to /etc/resolvconf/run/resolv.conf. When I try to run a container in pod I get the following errors: ERRO[0000] error loading cached network config: network "tstnet" not found in CNI cache WARN[0000] falling back to loading from existing plugins on disk ERRO[0000] error starting some container dependencies ERRO[0000] "error configuring network namespace for container 69ea2ee04b143c908ae5b7bcc4b3404fc7c7d3467fc8e11caf50a36eda76ec8a: error adding pod tst_tst to CNI network \"tstnet\": dnsname error: dnsmasq failed with \"\\ndnsmasq: directory /etc/resolv.conf for resolv-file is missing, cannot poll\\n\": exit status 5" Error: error starting some containers: internal libpod error Container is started using the following commands: podman network create tstnet podman pod create --name tst --hostname tst --network tstnet --publish 1521:1521 podman run --pod tst --name dummy alpine When I replace /etc/resolv.conf with a regular file (just remove it and copy /etc/resolvconf/run/resolv.conf into /etc/resolv.conf), the above commands complete without errors. Is this a bug or do I miss sthing? Best regards, -- \ / | | (OvO) | Михаил Иванов | (^^^) | | \^/ | E-mail: ivans(a)isle.spb.ru | ^ ^ | |

2 years, 4 months

3
2
0 / 0

Golang to use Podman REST API

by niranjan＠ashoo.in

Hi all I am looking for some code examples in Golang to use Podman REST API. Is there a repository or some code examples that i can refer to? Also while looking at the Podman REST API. (https://docs.podman.io/en/latest/_static/api.html). how do i call the "podman run" using the REST API ? Regards Niranjan.

2 years, 4 months

3
4
0 / 0

MiniWDL added Podman support; Testers and Pings to Verticals Needed

by Erik Bernoth

Hi Podman community, Short info that there is another open source project that can run on Podman now. See: https://github.com/chanzuckerberg/miniwdl/issues/520#issuecomment-981051895 MiniWDL is an engine that can run task-trees, sometimes called Pipelines or Flows or CI/CD engine and probably others, from the bioscience and bioinformatics world. Each task is wrapped in a container, and that is where Podman can come in handy. A huge advantage of MiniWDL is that it uses the standardised format WDL to represent its task-trees. Standardised data format means more integrations and more solution independence for the users. For Podman this integration is valuable in two ways: - It extends the capabilities to run multiple containers together for a shared purpose. But where kube play makes life easier for web service maintainers, MiniWDL makes life easier for event-driven data processors, e.g. in Big Data, IoT, or similar scenarios. - It might help grow awareness for Podman in these communities: science, bioinformatics, pharma, medical, police forces. I think, after having an integration between both projects, it would make sense, if someone could have a look if the right Podman commands have been used, technical limitations and security have been considered enough, and what else? Also, a product manager could check in with the corresponding vertical communities if that could open some collaboration opportunities elsewhere. And last but not least, maybe it could extend the use cases for which Podman is useful, right? Let me know what you think! Best, Erik

2 years, 4 months

3
2
0 / 0

Kernel Samepage Merging (KSM) and podman

by A. Anno

Hello, Kernel Samepage Merging (KSM) [1] seems to be an interesting linux kernel feature and I wonder if I should expect it to work with podman. On my Fedora 35 [2], I tried to enable it (both by `echo 1 >/sys/kernel/mm/ksm/run`, and with `ksmtuned`) and started a few container instances _of the same_ (podman) image. But `/sys/kernel/mm/ksm/pages_shared` always shows 0. According to the KVM documention [3], it is supported there. But it seems that KSM support is an application opt-in (with `int madvise(addr, length, MADV_MERGEABLE)`). Hence my question is: Is KSM supported with podman? Kind regards, aanno [1] https://www.kernel.org/doc/Documentation/vm/ksm.txt [2] https://fedoraproject.org/wiki/Features/KSM [3] https://www.linux-kvm.org/page/KSM

2 years, 5 months

2
1
0 / 0

Question on network commands with Podman

by Christopher.Miller＠gd-ms.com

I'm running Podman version 1.4.2-stable2 on RHEL 8.1. Any basic network commands that I try and run fail via sudo/non-sudo. Not sure why. sudo podman network create Error: unrecognized command 'podman network' Try 'podman -help' for more information sudo podman network ls Error: unrecognized command 'podman network' Try 'podman -help' for more information Also if I run podman -help | grep "network" , there are two options that are returned: --cni-config-dir --network-cmd-path However there is a directory under /etc/cni/net.d with a file by the name of 87-podman-bridge.conflist. If I run container as rootfull, it gets its IP address from here. Do I have to modify this file manually to setup different networks? Thanks

2 years, 5 months

3
3
0 / 0

Podman Community Cabal Meeting - Thu Nov 18, 2021, 11:00 a.m. EST (UTC-4)

by Tom Sweeney

Hi All! The Podman Community Cabal meeting will be starting up in just under 24 hours. Thursday November 18, 2021 at 11:00 a.m. EST (UTC-4). We'll be talking podman.ioredesign, play kube changes, and more! Agenda with video conference: https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?bot Hope to see you there! t

2 years, 5 months

1
0
0 / 0

2024

2023

2022

2021

2020

2019

Podman November 2021