- Podman - Podman List Archives

Podman v5.2.3 Released
by Do Not Reply 24 Sep '24

24 Sep '24

Hi all, Podman v5.2.3 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.2.3 Release Notes: -------------- ### Bugfixes - Fixed a bug that could cause network namespaces to fail to unmount, resulting in Podman commands hanging. - Fixed a bug where Podman could not run images which included SCTP exposed ports. - Fixed a bug where containers run by the root user, but inside a user namespace (including inside a container), could not use the `pasta` network mode. - Fixed a bug where volume copy-up did not properly chown empty volumes when the `:idmap` mount option was used. ### Misc - Updated Buildah to v1.37.3 This message was generated by an automated system. Replies to the sender will bounce, be ignored and discarded.

1 0

running qemu insisde podman for emulating a different architecture(arm on x86)?
by Johnny Westerlund 19 Sep '24

19 Sep '24

Hi list, Please keep me in CC since I'm not subscribed to the list. I have a use case for a CI environment where I sometimes would like to start / run an ARM VM. The box where I have podman is an X86 box but I've seen people running VM's in podman so thought it might be possible to run and emulate an arm image. It's not performance sensitive, I just need to validate that it works. Any pointers to how such a command might look? Kind regards Johnny -- Johnny Westerlund Solution Architect Red Hat EMEA <https://www.redhat.com/> jwesterl(a)redhat.com M: +46761049925 @RedHat <https://twitter.com/redhat> Red Hat <https://www.linkedin.com/company/red-hat> Red Hat <https://www.facebook.com/RedHatInc> <https://www.redhat.com/>

1 0

(no subject)
by Larry Cai 13 Sep '24

13 Sep '24

Hi: I have podman-remote / podman server deployment inside one kubernetes, podman build works, but when I execute podman run, it reports error Any suggestions for the direction? ``` jovyan@workenv-0:~$ podman version Client: Podman Engine Version: 5.2.2 API Version: 5.2.2 Go Version: go1.23.0 Git Commit: fcee48106a12dd531702d729d17f40f6e152027f Built: Wed Aug 21 20:01:29 2024 OS/Arch: linux/amd64 Server: Podman Engine Version: 4.9.4-rhel API Version: 4.9.4-rhel Go Version: go1.21.11 (Red Hat 1.21.11-1.el9_4) Built: Mon Jul 1 10:27:14 2024 OS/Arch: linux/amd64 jovyan@workenv-0:~$ podman run --log-level debug hello-world INFO[0000] podman filtering at log level debug DEBU[0000] Called run.PersistentPreRunE(podman run --log-level debug hello-world) DEBU[0000] DoRequest Method: GET URI: http://d/v5.2.2/libpod/_ping DEBU[0000] Loading registries configuration "/etc/containers/registries.conf" DEBU[0000] DoRequest Method: POST URI: http://d/v5.2.2/libpod/images/pull DEBU[0000] DoRequest Method: GET URI: http://d/v5.2.2/libpod/images/hello-world/json DEBU[0000] DoRequest Method: POST URI: http://d/v5.2.2/libpod/containers/create DEBU[0000] Enabling signal proxying DEBU[0000] Enabling signal proxying DEBU[0000] DoRequest Method: GET URI: http://d/v5.2.2/libpod/containers/015c01ec8bf0ec94ce7a7864b3dfdcf1c9963651d… DEBU[0000] DoRequest Method: POST URI: http://d/v5.2.2/libpod/containers/015c01ec8bf0ec94ce7a7864b3dfdcf1c9963651d… DEBU[0000] ExitCode msg: "unmarshalling error into &errorhandling.errormodel{because:\"\", message:\"\", responsecode:0}, data \"\": unexpected end of json input" Error: unmarshalling error into &errorhandling.ErrorModel{Because:"", Message:"", ResponseCode:0}, data "": unexpected end of JSON input DEBU[0000] Shutting down engines ```` * podman server is based on ubi9/podman with start script for "podman system service --time=0 tcp:[::]:12375" * downgrade podman client to 4.9.9 doesn't give any help Rgs/Larry

2 2

Podman Cabal Metting Tues, Sept 3, 2024 at 11:00 a.m. EDT (UTC-4)
by Tom Sweeney 27 Aug '24

27 Aug '24

Hey All! The next Podman Cabal meeting will be happening one week from today, on Tuesday, Sept 3, 2024, at 11:00 a.m. EDT (UTC-4). Currently, we only have one topic about issues internal to Red Hat, and happy to take more. Add a topic to the agenda! https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?both#opensource t

2 1

Podman v5.2.2 Released
by Do Not Reply 21 Aug '24

21 Aug '24

Hi all, Podman v5.2.2 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.2.2 Release Notes: -------------- ### Bugfixes - Fixed a bug where rootless Podman could fail to validate the runtime's volume path on systems with a symlinked `/home` ([#23515](https://github.com/containers/podman/issues/23515)). ### Misc - Updated Buildah to v1.37.2 - Updated the containers/common library to v0.60.2 - Updated the containers/image library to v5.32.2 This message was generated by an automated system. Replies to the sender will bounce, be ignored and discarded.

1 0

Podman v5.2.1 Released
by Do Not Reply 14 Aug '24

14 Aug '24

Hi all, Podman v5.2.1 is now available. You may view the full details at https://github.com/containers/podman/releases/tag/v5.2.1 Release Notes: -------------- ### Bugfixes - Fixed a bug where Podman could sometimes save an incorrect container state to the database, which could cause a number of issues including but not limited to attempting to clean up containers twice ([#21569](https://github.com/containers/podman/issues/21569)). ### Misc - Updated Buildah to v1.37.1 - Updated the containers/common library to v0.60.1 - Updated the containers/image library to v5.32.1 This message was generated by an automated system. Replies to the sender will bounce, be ignored and discarded.

1 0

Podman Swarm
by Daniel Perin Tavares 13 Aug '24

13 Aug '24

Hello Podmans, Is there no implementation planned for functionality similar to 'Docker swarm' in Podman? Swarm is so useful for small and medium infrastructures. Daniel Perin Tavares -- Companhia de Saneamento do Paraná www.sanepar.com.br <http://www.sanepar.com.br>

3 2

new updates of using podman inside k8s
by Larry Cai 13 Aug '24

13 Aug '24

Hi: I am used to follow podman setup inside k8s according to article https://www.redhat.com/sysadmin/podman-inside-kubernetes Now 3 years have passed, do we have an updated article for this? I have a vanilla k8s env, and `privileged: true` will not be allowed soon, so what is the easiest way to setup rootless-non-priv environment? apiVersion: v1 kind: Pod metadata: name: podman spec: containers: - name: podman image: registry.access.redhat.com/ubi9/podman command: ["sleep", "infinity"] securityContext: runAsUser: 1000 privileged: true Surely `hostPath` is not allowed as well? In the unix env, i can run `podman run -it -u podman:podman` to get correct env Any suggestions? (i am not security expert to understand), if I remove ` privileged: true` i got below [podman@podman ~]$ podman system info Error: mount /home/podman/.local/share/containers/storage/overlay:/home/podman/.local/share/containers/storage/overlay, flags: 0x1000: permission denied BTW: i only need the build env, maybe `buildah` image shall be used instead (but users are used to use podman command) Rgs, Larry

2 2

Why podman systemd units are deprecated
by Mehdi Haghgoo 13 Aug '24

13 Aug '24

I think podman systemd units were very useful. They allowed me to create reliable containerized services and websites on the server that would auto-restart on server reboot. However, I recently encountered podman inline help showing "deprecated" warning for systemd. Is there now a better alternative for the purpose they used to serve? Best regards, Mehdi

9 17

Best practices for restricting container network access
by François-Xavier Thomas 12 Aug '24

12 Aug '24

Hello all, I was wondering what was the current recommended way to restrict network access of containers? I'm trying to setup a web service via 'podman compose' ; I like most of my web services (proxied through Nginx) to only have access to the lo interface, and while for other services this is done via a systemd unit setting I'm having trouble finding the equivalent for podman. The following rules seem to work (I can also use -s/-d and specify the whole IP range used by containers): iptables -t filter -I NETAVARK_FORWARD -i podman2 ! -o lo,podman2 -j DROP iptables -t filter -I NETAVARK_FORWARD -o podman2 ! -i lo,podman2 -j DROP However, I'm not sure when the NETAVARK_FORWARD table is created (should I even use this table?), and the podman2 interface also does not exist before the network is created (when running 'podman compose up'). Is there a way to run these commands when the containers are brought up, like some kind of pre-up script? Is there a better way of achieving what I'm trying to do? Thanks for your help, François-Xavier

3 7