- Podman - Podman List Archives

Need help mounting a volume, thoroughly rootless, on my host, a Mac
by Mike Spreitzer 01 Aug '23

01 Aug '23

I have podman version 4.6.0 and MacOS version 12.6. I found https://github.com/ansible/vscode-ansible/wiki/macos and so recreated my podman machine with `podman machine init -v $HOME:$HOME`. The VM config says `security_model=none` without me having to tweak it. I was pointed at https://www.tutorialworks.com/podman-rootless-volumes/ but that does not address the added degree of difficulty that the podman machine VM injects. I am running podman rootless and want to run a container rootless with a host directory mounted into the container. The simplest thing does not work; the mounted directory appears inside the container to be owned by root. ``` mspreitz@mjs12 ~ % ls -ldn $HOME/test3 drwxr-xr-x 2 501 20 64 Jul 31 23:52 /Users/mspreitz/test3 mspreitz@mjs12 ~ % podman run --rm -it --entrypoint sh -v $HOME/test3:/test3 quay.io/prometheus/prometheus /prometheus $ id uid=65534(nobody) gid=65534(nobody) groups=65534(nobody) /prometheus $ ls -ldn /test3 drwxr-xr-x 2 0 65534 64 Aug 1 03:52 /test3 ``` Trying a little harder gets a mysterious error message. ``` mspreitz@mjs12 ~ % podman run --rm -it --entrypoint sh "--mount=type=bind,src=$HOME/test3,dst=/test3,idmap=uids=65534-501-1;gids=65534-20-1" quay.io/prometheus/prometheus Error: preparing container ab8859c8bc4fc5df55f319e9e17a4831734d00ad2332462d18a238d4ccb0e831 for attach: crun: mount_setattr `/Users/mspreitz/test3`: Invalid argument: OCI runtime error ``` Thanks, Mike

1 0

CANCELED! Thursday, August 1, 2023, 11:00 am EDT (UTC-4) Podman Community Meeting
by Tom Sweeney 31 Jul '23

31 Jul '23

Hi All, We were down to only one topic for the meeting tomorrow, and the presenter isn't able to make it now due to a scheduling conflict. Given that, and the number of people that are enjoying some holiday time, we have decided to cancel the Podman Community Meeting tomorrow, Thursday, August 1, 2023, 11:00 am EDT. We are still planning to meet on Thursday August 17, 2023 at 11:00 am EDT for the Cabal meeting, and then on Tuesday, October 3, 2023, at 11:00 am EDT, we will hold the next Podman Community meeting. If you have topics for either meeting, please send them along to me, or add them to the agenda listed below my sig. Thanks All! t Community Meeting: https://hackmd.io/fc1zraYdS0-klJ2KJcfC7w Cabal Meeting: https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?both

1 1

4.6 update & cgroup issues
by lejeczek 30 Jul '23

30 Jul '23

Hi guys. I've just got updates and I get:: -> $ podman run --cpus=4 --memory=8g ... Error: OCI runtime error: crun: the requested cgroup controller `cpu` is not available I wonder if anybody else - while on Centos 9 - sees this same or similar? many thanks, L.

1 0

Podman Community Meeting, Tuesday August 1, 2023 11:00 am EDT (UTC-4)
by Tom Sweeney 21 Jul '23

21 Jul '23

Hi All, The Podman Community Meeting will happen a week from Tuesday, on Tuesday August 1, 2023, 11:00am EDT (UTC-4). We have demos on Quadlet and podmansh lined up. We have room for more, so feel free to sign up to talk, or add a topic to the agenda: https://hackmd.io/fc1zraYdS0-klJ2KJcfC7wvideo link there too. t

1 0

Podman v4.6 released!
by Ashley Cui 21 Jul '23

21 Jul '23

We’re excited to announce that Podman v4.6.0 has been released! This release includes over 20 features and over 40 bugfixes. Some highlights include: - *Smoother Podman Machine*: We’ve fixed a bunch of bugs in Podman machine, including the 255 start bug. - *Better Quadlet*: Quadlet now supports 10 more options, including Sysctl, Pull, and HostName. - *More Networking Options*: New options for podman network create, as well as better WSL networking. - *Introducing Podmansh*: A new command which executes a user shell within a container when the user logs into the system. The container that the users get added to can be defined via a Podman Quadlet file. This feature is currently a Tech Preview which means it’s ready for users to try out but changes can be expected in upcoming versions. For a full list of changes, see our GitHub release <https://github.com/containers/podman/releases/tag/v4.6.0> page. Big thanks to our contributors and community! Podman v4.6.0 is now available, so please, try it out and let us know what you think!

1 0

Podman Community Meeting Thu July 20, 2023 EDT (UTC-5)
by Tom Sweeney 19 Jul '23

19 Jul '23

Hi All, The Podman Cabal meeting is happening in just over 23 hours from now at 11:00am EDT (UTC-5), Thu Jul 20, 2023. We'll be talking passwd/group entry handling, ipfs, and more. The new video conference link is in the agenda, hope to see you there! https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?both t

1 0

Podman Community Cabal Meeting Thursday July 20, 2023, 11:00 a.m. EDT (UTC-5)
by Tom Sweeney 13 Jul '23

13 Jul '23

Hi All, The next Podman Community Cabal meeting will be happening next Thursday, Jul 20, 2023 at 11:00am EDT (UTC-5). We'll be talking passwd/group handling, ipfs integrations, and more. Please note, we will be using a new Google Meet room. Agenda with room link: https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?both There's room for more topics, if you have one you'd like to discuss, please add it to the agenda. t

1 0

Storage directory perm/mismatch error with LDAP user home on NFS
by kurien.mathew＠mediakind.com 10 Jul '23

10 Jul '23

Hello, podman fails with directory permission errors or directory mismatch errors when I do a pull on my Ubuntu 20.x with an NFS mounted LDAP user home directory. Details are provided below. Would you be able to advise on the best way to resolve the issue? Thanks [user@user-vm2 opr:0]$ cat /etc/os-release NAME="Ubuntu" VERSION="20.04.6 LTS (Focal Fossa)" ID=ubuntu ID_LIKE=debian PRETTY_NAME="Ubuntu 20.04.6 LTS" VERSION_ID="20.04" HOME_URL=https://www.ubuntu.com/ SUPPORT_URL=https://help.ubuntu.com/ BUG_REPORT_URL=https://bugs.launchpad.net/ubuntu/ PRIVACY_POLICY_URL=https://www.ubuntu.com/legal/terms-and-policies/privacy-… VERSION_CODENAME=focal UBUNTU_CODENAME=focal [user@user-vm2 opr:0]$ [user@user-vm2 opr:127]$ podman --version podman version 4.5.1 [user@user-vm2 opr:125]$ podman pull --log-level debug alpine INFO[0000] podman filtering at log level debug DEBU[0000] Called pull.PersistentPreRunE(podman pull --log-level debug alpine) DEBU[0000] Using conmon: "/usr/bin/conmon" DEBU[0000] Initializing boltdb state at /home/user/.local/share/containers/storage/libpod/bolt_state.db DEBU[0000] Using graph driver vfs DEBU[0000] Using graph root /home/user/.local/share/containers/storage DEBU[0000] Using run root /run/user/7148269/containers DEBU[0000] Using static dir /home/user/.local/share/containers/storage/libpod DEBU[0000] Using tmp dir /run/user/7148269/libpod/tmp DEBU[0000] Using volume path /home/user/.local/share/containers/storage/volumes DEBU[0000] Using transient store: false DEBU[0000] [graphdriver] trying provided driver "vfs" DEBU[0000] Initializing event backend file DEBU[0000] Configured OCI runtime runsc initialization failed: no valid executable found for OCI runtime runsc: invalid argument DEBU[0000] Configured OCI runtime youki initialization failed: no valid executable found for OCI runtime youki: invalid argument DEBU[0000] Configured OCI runtime krun initialization failed: no valid executable found for OCI runtime krun: invalid argument DEBU[0000] Configured OCI runtime ocijail initialization failed: no valid executable found for OCI runtime ocijail: invalid argument DEBU[0000] Configured OCI runtime crun initialization failed: no valid executable found for OCI runtime crun: invalid argument DEBU[0000] Configured OCI runtime runj initialization failed: no valid executable found for OCI runtime runj: invalid argument DEBU[0000] Configured OCI runtime kata initialization failed: no valid executable found for OCI runtime kata: invalid argument DEBU[0000] Configured OCI runtime crun-wasm initialization failed: no valid executable found for OCI runtime crun-wasm: invalid argument DEBU[0000] Using OCI runtime "/usr/sbin/runc" INFO[0000] Setting parallel job count to 13 DEBU[0000] Pulling image alpine (policy: always) DEBU[0000] Looking up image "alpine" in local containers storage DEBU[0000] Normalized platform linux/amd64 to {amd64 linux [] } DEBU[0000] Loading registries configuration "/etc/containers/registries.conf" DEBU[0000] Trying "localhost/alpine:latest" ... DEBU[0000] Trying "docker.io/library/alpine:latest" ... DEBU[0000] Trying "docker.io/library/alpine:latest" ... DEBU[0000] Trying "alpine" ... DEBU[0000] Normalized platform linux/amd64 to {amd64 linux [] } DEBU[0000] Attempting to pull candidate docker.io/library/alpine:latest for alpine DEBU[0000] parsed reference into "[vfs@/home/user/.local/share/containers/storage+/run/user/7148269/containers]docker.io/library/alpine:latest" DEBU[0000] Resolving "alpine" using unqualified-search registries (/etc/containers/registries.conf) Resolving "alpine" using unqualified-search registries (/etc/containers/registries.conf) Trying to pull docker.io/library/alpine:latest... DEBU[0000] Copying source image //alpine:latest to destination image [vfs@/home/user/.local/share/containers/storage+/run/user/7148269/containers]docker.io/library/alpine:latest DEBU[0000] Using registries.d directory /etc/containers/registries.d DEBU[0000] Trying to access "docker.io/library/alpine:latest" DEBU[0000] No credentials matching docker.io/library/alpine found in /run/user/7148269/containers/auth.json DEBU[0000] No credentials matching docker.io/library/alpine found in /home/user/.config/containers/auth.json DEBU[0000] No credentials matching docker.io/library/alpine found in /home/user/.docker/config.json DEBU[0000] No credentials matching docker.io/library/alpine found in /home/user/.dockercfg DEBU[0000] No credentials for docker.io/library/alpine found DEBU[0000] No signature storage configuration found for docker.io/library/alpine:latest, using built-in default file:///home/user/.local/share/containers/sigstore DEBU[0000] Looking for TLS certificates and private keys in /etc/docker/certs.d/docker.io DEBU[0000] GET https://registry-1.docker.io/v2/ DEBU[0000] Ping https://registry-1.docker.io/v2/ status 401 DEBU[0000] GET https://auth.docker.io/token?scope=repository%3Alibrary%2Falpine%3Apull&ser… DEBU[0000] GET https://registry-1.docker.io/v2/library/alpine/manifests/latest DEBU[0001] Content-Type from manifest GET is "application/vnd.docker.distribution.manifest.list.v2+json" DEBU[0001] Using blob info cache at /home/user/.local/share/containers/cache/blob-info-cache-v1.boltdb DEBU[0001] Source is a manifest list; copying (only) instance sha256:25fad2a32ad1f6f510e528448ae1ec69a28ef81916a004d3629874104f8a7f70 for current system DEBU[0001] GET https://registry-1.docker.io/v2/library/alpine/manifests/sha256:25fad2a32ad… DEBU[0001] Content-Type from manifest GET is "application/vnd.docker.distribution.manifest.v2+json" DEBU[0001] IsRunningImageAllowed for image docker:docker.io/library/alpine:latest DEBU[0001] Using default policy section DEBU[0001] Requirement 0: allowed DEBU[0001] Overall: allowed DEBU[0001] Downloading /v2/library/alpine/blobs/sha256:c1aabb73d2339c5ebaa3681de2e9d9c18d57485045a4e311d9f8004bec208d67 DEBU[0001] GET https://registry-1.docker.io/v2/library/alpine/blobs/sha256:c1aabb73d2339c5… Getting image source signatures DEBU[0001] Reading /home/user/.local/share/containers/sigstore/library/alpine@sha256=25fad2a32ad1f6f510e528448ae1ec69a28ef81916a004d3629874104f8a7f70/signature-1 DEBU[0001] Not looking for sigstore attachments: disabled by configuration DEBU[0001] Manifest has MIME type application/vnd.docker.distribution.manifest.v2+json, ordered candidate list [application/vnd.docker.distribution.manifest.v2+json, application/vnd.docker.distribution.manifest.v1+prettyjws, application/vnd.oci.image.manifest.v1+json, application/vnd.docker.distribution.manifest.v1+json] DEBU[0001] ... will first try using the original manifest unmodified DEBU[0001] Checking if we can reuse blob sha256:31e352740f534f9ad170f75378a84fe453d6156e40700b882d737a8f4a6988a3: general substitution = true, compression for MIME type "application/vnd.docker.image.rootfs.diff.tar.gzip" = true DEBU[0001] Failed to retrieve partial blob: blob type not supported for partial retrieval DEBU[0001] Downloading /v2/library/alpine/blobs/sha256:31e352740f534f9ad170f75378a84fe453d6156e40700b882d737a8f4a6988a3 DEBU[0001] GET https://registry-1.docker.io/v2/library/alpine/blobs/sha256:31e352740f534f9… DEBU[0001] Detected compression format gzip DEBU[0001] Using original blob without modification Copying blob 31e352740f53 done DEBU[0001] Start untar layer ERRO[0001] While applying layer: ApplyLayer stdout: stderr: setting up pivot dir: mkdir /home/user/.local/share/containers/storage/vfs/dir/78a822fe2a2d2c84f3de4a403188c45f623017d6a4521d23047c9fbb0801794c/.pivot_root3008513360:Copying blob 31e352740f53 done DEBU[0001] Error pulling candidate docker.io/library/alpine:latest: copying system image from manifest list: writing blob: adding layer with blob "sha256:31e352740f534f9ad170f75378a84fe453d6156e40700b882d737a8f4a6988a3": ApplyLayer stdout: stderr: setting up pivot dir: mkdir /home/user/.local/share/containers/storage/vfs/dir/78a822fe2a2d2c84f3de4a403188c45f623017d6a4521d23047c9fbb0801794c/.pivot_root3008513360: permission denied exit status 1 Error: copying system image from manifest list: writing blob: adding layer with blob "sha256:31e352740f534f9ad170f75378a84fe453d6156e40700b882d737a8f4a6988a3": ApplyLayer stdout: stderr: setting up pivot dir: mkdir /home/user/.local/share/containers/storage/vfs/dir/78a822fe2a2d2c84f3de4a403188c45f623017d6a4521d23047c9fbb0801794c/.pivot_root3008513360: permission denied exit status 1 DEBU[0001] Shutting down engines [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ podman pull --log-level debug --root /space/containers/storage alpine INFO[0000] podman filtering at log level debug DEBU[0000] Called pull.PersistentPreRunE(podman pull --log-level debug --root /space/containers/storage alpine) DEBU[0000] Using conmon: "/usr/bin/conmon" DEBU[0000] Initializing boltdb state at /space/containers/storage/libpod/bolt_state.db DEBU[0000] Overriding run root "/run/user/7148269/containers" with "/run/containers/storage" from database ERRO[0000] User-selected graph driver "vfs" overwritten by graph driver "overlay" from database - delete libpod local files ("/space/containers/storage") to resolve. May prevent use of images created by other tools DEBU[0000] Using graph driver overlay DEBU[0000] Using graph root /space/containers/storage DEBU[0000] Using run root /run/containers/storage DEBU[0000] Using static dir /space/containers/storage/libpod DEBU[0000] Using tmp dir /run/user/7148269/libpod/tmp DEBU[0000] Using volume path /space/containers/storage/volumes DEBU[0000] Using transient store: false Error: mkdir /run/containers/storage: permission denied DEBU[0000] Shutting down engines [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ [user@user-vm2 opr:125]$ podman pull --log-level debug --root /space/containers/storage --runroot /space/containers/run alpine INFO[0000] podman filtering at log level debug DEBU[0000] Called pull.PersistentPreRunE(podman pull --log-level debug --root /space/containers/storage --runroot /space/containers/run alpine) DEBU[0000] Using conmon: "/usr/bin/conmon" DEBU[0000] Initializing boltdb state at /space/containers/storage/libpod/bolt_state.db ERRO[0000] User-selected graph driver "vfs" overwritten by graph driver "overlay" from database - delete libpod local files ("/space/containers/storage") to resolve. May prevent use of images created by other tools DEBU[0000] Using graph driver overlay DEBU[0000] Using graph root /space/containers/storage DEBU[0000] Using run root /space/containers/run DEBU[0000] Using static dir /space/containers/storage/libpod DEBU[0000] Using tmp dir /run/user/7148269/libpod/tmp DEBU[0000] Using volume path /space/containers/storage/volumes DEBU[0000] Using transient store: false Error: database storage temporary directory (runroot) "/run/containers/storage" does not match our storage temporary directory (runroot) "/space/containers/run": database configuration mismatch DEBU[0000] Shutting down engines [user@user-vm2 opr:125]$

2 2

Alternative mirror for downloading coreos on macOS
by Mehdi Haghgoo 07 Jul '23

07 Jul '23

Hi, I have started to have problems recently downloading coreos images when initializing podman machine (via terminal or Podman Desktop) on macOS. Here are the errors: mhd@MacBook ~ % podman machine init Error: Get "https://builds.coreos.fedoraproject.org/streams/testing.json": read tcp 192.168.1.109:54792->18.64.141.56:443: read: connection reset by peer Is there a way I can set a mirror repository (if there is such a mirror) for coreos to download its image from? mehdi,

2 1

Re: Pasta-networked rootless Podman container gets Connection Refused with the host's public IP
by jklaiho＠iki.fi 28 Jun '23

28 Jun '23

Thank you David and Stefano! You've clarified the matter significantly. > > > > Hi; I previously asked this on the Podman mailing list, but I'm not > > sure if the issue in question is a feature of Podman or Passt (or > > both), and I got no replies from the Podman list, so I figured I'd > > try here as well. > > I actually saw an answer to that, did you miss this perhaps? Indeed, I missed the reply on the Podman list – some weird threading glitch on my local client didn't show it as updated. I'll have to do some further experimentation on the server in the near future. I'll return later with more details if I can't get it to work. - JK

1 0