mqueue msg_max in rootless container
by Michael Ivanov
Hallo!
I'm trying to run my application in podman rootless container and I stumble
on following problem: my program needs /proc/sys/fs/mqueue/msg_max to be at
least 256, but in running container this value is just 10. When I try to
specify this parameter while running the image (--sysctl 'fs.mqueue.msg_max=256')
I get the following error:
Error: open /proc/sys/fs/mqueue/msg_max: Permission denied: OCI permission denied
and container is not created.
My host where container is being run has this parameter set to 256. How can I
expose current host setting for msg_max to my container?
Best regards,
--
\ / | |
(OvO) | Михаил Иванов |
(^^^) | |
\^/ | E-mail: ivans(a)isle.spb.ru |
^ ^ | |
4 days, 23 hours
dnf update
by Dewayne Branch
Every time i do dnf update I can not download or update podman
Error: Failed to download metadata for repo 'shiftkey': Cannot download
repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried
Copr repo for podman4 owned by rhcontainerbot 135 B/s | 341 B 00:02
Errors during downloading metadata for repository
'copr:copr.fedorainfracloud.org:rhcontainerbot:podman4':
- Status code: 404 for
https://download.copr.fedorainfracloud.org/results/rhcontainerbot/podman4...
(IP: 18.66.161.75)
Error: Failed to download metadata for repo
'copr:copr.fedorainfracloud.org:rhcontainerbot:podman4':
Cannot download repomd.xml: Cannot download repodata/repomd.xml: All
mirrors were tried
6 months, 3 weeks
container fails to start due to host's iface - ?
by lejeczek
Hi guys.
I have a pretty vanilla setup and just one single container
which fails to start @boot complaining about being unable to
connect to one host's IP.
Container's 'regular' unit:
...
Wants=network-online.target
After=network-online.target
RequiresMountsFor=/run/user/2002/containers
...
Restart=on-failure
I think that this @boot failure - for very first user-manual
restart works - is due to the fact that service/daemon to
which container needs to connect, is not started soon enough
& that service runs on the host.
I expected 'Restart=on-failure' to take care of such
circumstances but, apparently it does not, unless something
else is in play here.
Would you have any suggestion - all are very welcomed.
many thanks, L.
7 months, 1 week
Podman socket in macOS?
by jklaiho＠iki.fi
Documentation about this seems thin on the ground or outdated, or at least I'm not able to find or properly decipher the correct docs.
I've got a macOS Ventura build machine that I use with GitLab CI, having installed GitLab Runner and Docker on it. I'd be interested in trying it out with Podman instead. It's probable that it won't work, given that the documentation at https://docs.gitlab.com/runner/executors/docker.html#use-podman-to-run-do... only mentions Linux. However, the way the Docker Executor is configured to use Podman in config.toml makes it look like it just might work, if I pointed it to the Podman socket.
But that's where I'm stuck. Assuming that GitLab Runner supports ssh:// socket addresses, what do I put in the 'host' row of config.toml, exactly? Or can I somehow forward the SSH socket from the Podman machine (creted using Podman Desktop) onto the host machine so that I can access it as a unix:// address?
If possible, I'd like to operate Podman rootlessly for this purpose, but can go rootful if it's necessary.
Thanks in advance!
7 months, 2 weeks
Announcement: Podman v4.5 is released!
by Lokesh Mandvekar
Hi list,
We are happy to announce that Podman v4.5 is now available! Release
announcement with the details here:
https://blog.podman.io/2023/04/new-release-podman-v4-5/ . A number of
improvements to `podman kube`, quadlet, a new command: `podman machine os
apply`, and more.
It is already available in the stable repositories for Fedora 37, 38 and
rawhide and should be making its way into other distributions soon.
--
Lokesh
Libera, GitLab, GitHub, Fedora: lsm5
Matrix: @lsm5:lsm5.ems.host
GPG: 0xC7C3A0DD
https://keybase.io/lsm5
7 months, 2 weeks
docker-compose does not start on Windows
by Mehdi Haghgoo
Hi,
I recently upgraded my Podman Desktop to the latest v0.14.0 hoping it will work with Docker Compose.
Although there is a check mark near Compose on the status bar of Podman Desktop, I am not able to run "docker-compose up" successfully.
Once issued, the command gives this output:
PS E:\src\myapp> docker-compose up
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connection.py", line 174, in _new_conn
conn = connection.create_connection(
File "D:\tools\Python\Python310\lib\site-packages\urllib3\util\connection.py", line 95, in create_connection
raise err
File "D:\tools\Python\Python310\lib\site-packages\urllib3\util\connection.py", line 85, in create_connection
sock.connect(sa)
ConnectionRefusedError: [WinError 10061] No connection could be made because the target machine actively refused it
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connectionpool.py", line 703, in urlopen
httplib_response = self._make_request(
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connectionpool.py", line 398, in _make_request
conn.request(method, url, **httplib_request_kw)
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connection.py", line 239, in request
super(HTTPConnection, self).request(method, url, body=body, headers=headers)
File "D:\tools\Python\Python310\lib\http\client.py", line 1282, in request
self._send_request(method, url, body, headers, encode_chunked)
File "D:\tools\Python\Python310\lib\http\client.py", line 1328, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "D:\tools\Python\Python310\lib\http\client.py", line 1277, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "D:\tools\Python\Python310\lib\http\client.py", line 1037, in _send_output
self.send(msg)
File "D:\tools\Python\Python310\lib\http\client.py", line 975, in send
self.connect()
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connection.py", line 205, in connect
conn = self._new_conn()
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connection.py", line 186, in _new_conn
raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <urllib3.connection.HTTPConnection object at 0x000001BDA965F490>: Failed to establish a new connection: [WinError 10061] No connection could be made because the target machine actively refused it
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\site-packages\requests\adapters.py", line 489, in send
resp = conn.urlopen(
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connectionpool.py", line 787, in urlopen
retries = retries.increment(
File "D:\tools\Python\Python310\lib\site-packages\urllib3\util\retry.py", line 592, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPConnectionPool(host='localhost', port=5555): Max retries exceeded with url: /version (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x000001BDA965F490>: Failed to establish a new connection: [WinError 10061] No connection could be made because the target machine actively refused it'))
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\site-packages\docker\api\client.py", line 214, in _retrieve_server_version
return self.version(api_version=False)["ApiVersion"]
File "D:\tools\Python\Python310\lib\site-packages\docker\api\daemon.py", line 181, in version
return self._result(self._get(url), json=True)
File "D:\tools\Python\Python310\lib\site-packages\docker\utils\decorators.py", line 46, in inner
return f(self, *args, **kwargs)
File "D:\tools\Python\Python310\lib\site-packages\docker\api\client.py", line 237, in _get
return self.get(url, **self._set_request_timeout(kwargs))
File "D:\tools\Python\Python310\lib\site-packages\requests\sessions.py", line 600, in get
return self.request("GET", url, **kwargs)
File "D:\tools\Python\Python310\lib\site-packages\requests\sessions.py", line 587, in request
resp = self.send(prep, **send_kwargs)
File "D:\tools\Python\Python310\lib\site-packages\requests\sessions.py", line 701, in send
r = adapter.send(request, **kwargs)
File "D:\tools\Python\Python310\lib\site-packages\requests\adapters.py", line 565, in send
raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPConnectionPool(host='localhost', port=5555): Max retries exceeded with url: /version (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x000001BDA965F490>: Failed to establish a new connection: [WinError 10061] No connection could be made because the target machine actively refused it'))
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\runpy.py", line 196, in _run_module_as_main
return _run_code(code, main_globals, None,
File "D:\tools\Python\Python310\lib\runpy.py", line 86, in _run_code
exec(code, run_globals)
File "D:\tools\Python\Python310\Scripts\docker-compose.exe\__main__.py", line 7, in <module>
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\main.py", line 81, in main
command_func()
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\main.py", line 200, in perform_command
project = project_from_options('.', options)
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\command.py", line 60, in project_from_options
return get_project(
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\command.py", line 152, in get_project
client = get_client(
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\docker_client.py", line 41, in get_client
client = docker_client(
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\docker_client.py", line 170, in docker_client
client = APIClient(use_ssh_client=not use_paramiko_ssh, **kwargs)
File "D:\tools\Python\Python310\lib\site-packages\docker\api\client.py", line 197, in __init__
self._version = self._retrieve_server_version()
File "D:\tools\Python\Python310\lib\site-packages\docker\api\client.py", line 221, in _retrieve_server_version
raise DockerException(
docker.errors.DockerException: Error while fetching server API version: HTTPConnectionPool(host='localhost', port=5555): Max retries exceeded with url: /version (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x000001BDA965F490>: Failed to establish a new connection: [WinError 10061] No connection could be made because the target machine actively refused it'))
PS E:\src\myapp> docker-compose pull
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connection.py", line 174, in _new_conn
conn = connection.create_connection(
File "D:\tools\Python\Python310\lib\site-packages\urllib3\util\connection.py", line 95, in create_connection
raise err
File "D:\tools\Python\Python310\lib\site-packages\urllib3\util\connection.py", line 85, in create_connection
sock.connect(sa)
ConnectionRefusedError: [WinError 10061] No connection could be made because the target machine actively refused it
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connectionpool.py", line 703, in urlopen
httplib_response = self._make_request(
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connectionpool.py", line 398, in _make_request
conn.request(method, url, **httplib_request_kw)
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connection.py", line 239, in request
super(HTTPConnection, self).request(method, url, body=body, headers=headers)
File "D:\tools\Python\Python310\lib\http\client.py", line 1282, in request
self._send_request(method, url, body, headers, encode_chunked)
File "D:\tools\Python\Python310\lib\http\client.py", line 1328, in _send_request
self.endheaders(body, encode_chunked=encode_chunked)
File "D:\tools\Python\Python310\lib\http\client.py", line 1277, in endheaders
self._send_output(message_body, encode_chunked=encode_chunked)
File "D:\tools\Python\Python310\lib\http\client.py", line 1037, in _send_output
self.send(msg)
File "D:\tools\Python\Python310\lib\http\client.py", line 975, in send
self.connect()
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connection.py", line 205, in connect
conn = self._new_conn()
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connection.py", line 186, in _new_conn
raise NewConnectionError(
urllib3.exceptions.NewConnectionError: <urllib3.connection.HTTPConnection object at 0x000001642D3BF400>: Failed to establish a new connection: [WinError 10061] No connection could be made because the target machine actively refused it
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\site-packages\requests\adapters.py", line 489, in send
resp = conn.urlopen(
File "D:\tools\Python\Python310\lib\site-packages\urllib3\connectionpool.py", line 787, in urlopen
retries = retries.increment(
File "D:\tools\Python\Python310\lib\site-packages\urllib3\util\retry.py", line 592, in increment
raise MaxRetryError(_pool, url, error or ResponseError(cause))
urllib3.exceptions.MaxRetryError: HTTPConnectionPool(host='localhost', port=5555): Max retries exceeded with url: /version (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x000001642D3BF400>: Failed to establish a new connection: [WinError 10061] No connection could be made because the target machine actively refused it'))
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\site-packages\docker\api\client.py", line 214, in _retrieve_server_version
return self.version(api_version=False)["ApiVersion"]
File "D:\tools\Python\Python310\lib\site-packages\docker\api\daemon.py", line 181, in version
return self._result(self._get(url), json=True)
File "D:\tools\Python\Python310\lib\site-packages\docker\utils\decorators.py", line 46, in inner
return f(self, *args, **kwargs)
File "D:\tools\Python\Python310\lib\site-packages\docker\api\client.py", line 237, in _get
return self.get(url, **self._set_request_timeout(kwargs))
File "D:\tools\Python\Python310\lib\site-packages\requests\sessions.py", line 600, in get
return self.request("GET", url, **kwargs)
File "D:\tools\Python\Python310\lib\site-packages\requests\sessions.py", line 587, in request
resp = self.send(prep, **send_kwargs)
File "D:\tools\Python\Python310\lib\site-packages\requests\sessions.py", line 701, in send
r = adapter.send(request, **kwargs)
File "D:\tools\Python\Python310\lib\site-packages\requests\adapters.py", line 565, in send
raise ConnectionError(e, request=request)
requests.exceptions.ConnectionError: HTTPConnectionPool(host='localhost', port=5555): Max retries exceeded with url: /version (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x000001642D3BF400>: Failed to establish a new connection: [WinError 10061] No connection could be made because the target machine actively refused it'))
During handling of the above exception, another exception occurred:
Traceback (most recent call last):
File "D:\tools\Python\Python310\lib\runpy.py", line 196, in _run_module_as_main
return _run_code(code, main_globals, None,
File "D:\tools\Python\Python310\lib\runpy.py", line 86, in _run_code
exec(code, run_globals)
File "D:\tools\Python\Python310\Scripts\docker-compose.exe\__main__.py", line 7, in <module>
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\main.py", line 81, in main
command_func()
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\main.py", line 200, in perform_command
project = project_from_options('.', options)
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\command.py", line 60, in project_from_options
return get_project(
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\command.py", line 152, in get_project
client = get_client(
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\docker_client.py", line 41, in get_client
client = docker_client(
File "D:\tools\Python\Python310\lib\site-packages\compose\cli\docker_client.py", line 170, in docker_client
client = APIClient(use_ssh_client=not use_paramiko_ssh, **kwargs)
File "D:\tools\Python\Python310\lib\site-packages\docker\api\client.py", line 197, in __init__
self._version = self._retrieve_server_version()
File "D:\tools\Python\Python310\lib\site-packages\docker\api\client.py", line 221, in _retrieve_server_version
raise DockerException(
docker.errors.DockerException: Error while fetching server API version: HTTPConnectionPool(host='localhost', port=5555): Max retries exceeded with url: /version (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x000001642D3BF400>: Failed to establish a new connection: [WinError 10061] No connection could be made because the target machine actively refused it'))
Additional Info:
docker-compose version: 1.29.2
DOCKER_HOST env variable is not set (empty).
Any ideas what might be the culprit?
7 months, 2 weeks
Podman Community Cabal Meeting, Thu April 20, 2023, 11:00 a.m. EDT (UTC-5)
by Tom Sweeney
Hi All,
The Podman Community Cabal meeting is happening two weeks from right
now, on Thur, April 20, 2023 at 11:00am EDT (UTC-5). Currently, our
agenda is wide open for topics, so if you have a topic to discuss about
Podman, please add it to the agenda!
https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?both
Thanks!
t
7 months, 4 weeks
Podman support for Docker Compose V2
by Mehdi Haghgoo
Hi,
Does Podman support Compose V2? Like Docker Compose V2, it could be possible to run "podman compose up/down". I tried with podman 4.4.2 and failed.
I think it would be a cool feature. Is that support on the agenda or not?
- Mehdi
8 months
Some questions about networking
by Kamil Jońca
I recently started play with podman and non-root contaiers and I think I
missed something about networking.
Assume we have such network on host:
--8<---------------cut here---------------start------------->8---
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000
link/ether b4:2e:99:f0:ae:57 brd ff:ff:ff:ff:ff:ff
inet 192.168.200.200/24 brd 192.168.200.255 scope global eth0
valid_lft forever preferred_lft forever
inet6 fd1b:69d9:9e1d:0:b62e:99ff:fef0:ae57/64 scope global dynamic mngtmpaddr
valid_lft forever preferred_lft forever
inet6 fe80::b62e:99ff:fef0:ae57/64 scope link
valid_lft forever preferred_lft forever
23: cni-podman0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default qlen 1000
link/ether ce:89:80:01:c8:e6 brd ff:ff:ff:ff:ff:ff
inet 10.88.0.1/16 brd 10.88.255.255 scope global cni-podman0
valid_lft forever preferred_lft forever
inet6 fe80::1c6d:52ff:fedb:9d9a/64 scope link
valid_lft forever preferred_lft forever
--8<---------------cut here---------------end--------------->8---
There is not NAT/MASQUERADE rules in nftables.
$podman network inspect podman
[
{
"name": "podman",
"id": "2f259bab93aaaaa2542ba43ef33eb990d0999ee1b9924b557b7be53c0b7a1bb9",
"driver": "bridge",
"network_interface": "podman0",
"created": "2023-03-29T19:50:55.753738104+02:00",
"subnets": [
{
"subnet": "10.88.0.0/16",
"gateway": "10.88.0.1"
}
],
"ipv6_enabled": false,
"internal": false,
"dns_enabled": false,
"ipam_options": {
"driver": "host-local"
}
}
]
I run container with command:
$podman run -ti --log-level debug --network podman --name test test
then in container:
--8<---------------cut here---------------start------------->8---
root@ddc54c227a9d:/# curl onet.pl
<html>
<head><title>301 Moved Permanently</title></head>
<body>
<center><h1>301 Moved Permanently</h1></center>
<hr><center>nginx</center>
</body>
</html>
--8<---------------cut here---------------end--------------->8---
Why container has access outside host?
I would expect that I will have some rules to allow traffic between
podman0 and eth0?
Is it possible to configure this behavior?
Where can I found description for values in "podman network inspect"?
What is difference (in this case) between macvlan and bridge (except
root/non-root)?
KJ
--
http://stopstopnop.pl/stop_stopnop.pl_o_nas.html
8 months
