- Podman - Podman List Archives

Cancelled! Podman Community Cabal Meeting on October 20, 2022 at 11:00 am EDT (UTC-5)
by Tom Sweeney 13 Oct '22

13 Oct '22

Hi All, A large number of the regular attendees will be involved in another meeting at the same time next week, including myself. Given that and the fact that we currently have no topics for the meeting, we have decided to cancel the Podman Community Cabal meeting next Thursday October 20, 2022. The next Podman Community Cabal Meeting will be on Thursday November 17, 2022 at 11:00 a.m. EST (UTC-4). Please note that the US will be rolling back our clocks an hour between then and now. If you have any topics that you'd like to discuss, please let me know. Thanks all! t

1 0

Podman Community meeting tomorrow, Tues Oct 4, 2022 at 11:00 a.m. EDT (UTC-5)
by Tom Sweeney 03 Oct '22

03 Oct '22

Hi All, In just under 21 hours from now, at 11:00 a.m. EDT (UTC-5) on Tues Oct 4, the Podman Community Meeting will be starting up. We'll have demos on Distrobox, the Vault Test Suite, and an open forum for any questions and answers. Free to attend virtually, meeting info ison the agenda: https://podman.io/community/meeting/agenda/ <https://t.co/tEqURz2atf> Hope to see you there! t

1 0

podman-desktop external email list?
by Tom Sweeney 30 Sep '22

30 Sep '22

Hey All, Good idea for the internal list. Should I also create a podman-desktop(a)list.podman.io for external to Red Hat use? That would mirror the Podman mailing list, podman(a)lists.podman.io. t

1 0

Can’t run systemd in podman container
by Yvan Masson 30 Sep '22

30 Sep '22

Hi list, I am quite new to Podman/Docker and containers in general. For some reasons, I want to run systemd in a unprivileged container, but it does not really works: - If I run my container with `podman run localhost/my_image:latest` it fails with error "Trying to run as user instance, but the system has not been booted with systemd.". Using option `systemd=always` does not help. - However, if I run my container with `podman run localhost/my_image:latest /lib/systemd/systemd` then it works. My Containerfile: FROM docker.io/library/debian:bullseye RUN apt-get update RUN apt-get install systemd --assume-yes --no-install-recommends CMD /lib/systemd/systemd Do you know what should I do so that my `CMD /lib/systemd/systemd` directive works? Regards, Yvan

3 5

additionalimagestores is too slow
by GHui Wu 29 Sep '22

29 Sep '22

I have set additionalimagestores. But the the path is a network disk, I want to pull it to the local disk. How can I pull it to the local disk?

3 3

ls: cannot open directory mysql/: Permission denied
by GHui Wu 28 Sep '22

28 Sep '22

I haven't permission in container to access the directory which is mounted from host. $ podman run -dt -v ./mysql/data:/mysql centos:7.9.2009 sleep 36000 $ podman exec -it 920b52079e67 /bin/bash [root@920b52079e67 mysql]# useradd mysql [root@920b52079e67 mysql]# su - mysql [mysql@920b52079e67 mysql]$ cd / [mysql@920b52079e67 /]$ ll total 44 -rw-r--r-- 1 root root 12114 Nov 13 2020 anaconda-post.log lrwxrwxrwx 1 root root 7 Nov 13 2020 bin -> usr/bin drwxr-xr-x 5 root root 360 Sep 22 10:39 dev drwxr-xr-x 47 root root 460 Sep 22 10:40 etc drwxr-xr-x 3 root root 60 Sep 22 10:40 home lrwxrwxrwx 1 root root 7 Nov 13 2020 lib -> usr/lib lrwxrwxrwx 1 root root 9 Nov 13 2020 lib64 -> usr/lib64 drwxr-xr-x 2 root root 4096 Apr 11 2018 media drwxr-xr-x 2 root root 4096 Apr 11 2018 mnt drwxrwxrwx 2 root root 4096 Sep 22 10:28 mysql drwxr-xr-x 2 root root 4096 Apr 11 2018 opt dr-xr-xr-x 1394 65534 65534 0 Sep 22 10:39 proc dr-xr-x--- 2 root root 4096 Nov 13 2020 root drwxr-xr-x 11 root root 60 Sep 22 10:39 run lrwxrwxrwx 1 root root 8 Nov 13 2020 sbin -> usr/sbin drwxr-xr-x 2 root root 4096 Apr 11 2018 srv dr-xr-xr-x 13 65534 65534 0 Sep 22 10:01 sys drwxrwxrwx 7 root root 4096 Nov 13 2020 tmp drwxr-xr-x 13 root root 4096 Nov 13 2020 usr drwxr-xr-x 18 root root 80 Sep 22 10:40 var [mysql@920b52079e67 /]$ ls mysql/ ls: cannot open directory mysql/: Permission denied [mysql@920b52079e67 /]$

2 4

Additional stores configuration to cache images
by Ganeshar, Puvi 27 Sep '22

27 Sep '22

Hello All, I am following Dan Walsh’s SysAdmin article (https://developers.redhat.com/blog/2019/08/14/best-practices-for-running-bu…) to speed up our CI builds in Jenkins. I am trying to do what’s suggested under “Additional stores”, basically volume mounting the directory where the containerd stores on the K8s host into a container under /var/lib/shared. We are running containerd as the runtime on an EKS cluster. According to the article, I need to do: # mkdir /var/lib/containers4 # podman run -v ./build:/build:z -v /var/lib/containers/storage:/var/lib/shared:ro -v \ /var/lib/containers4:/var/lib/containers:Z quay.io/buildah/stable<http://quay.io/buildah/stable> \ buildah -t image4 bud /build # podman run -v /var/lib/containers/storage:/var/lib/shared:ro \ -v >/var/lib/containers4:/var/lib/containers:Z quay.io/buildah/stable<http://quay.io/buildah/stable> buildah push image4 \ registry.company.com/myuser<http://registry.company.com/myuser> Can someone please tell me the equivalent directory for /var/lib/containers/storage? I.e where does containerd store the download images on the Kubernetes worker nodes? The containerd config looks like this: # cat /etc/containerd/config.toml version = 2 root = "/var/lib/containerd" state = "/run/containerd" [grpc] address = "/run/containerd/containerd.sock" [plugins."io.containerd.grpc.v1.cri".containerd] default_runtime_name = "runc" [plugins."io.containerd.grpc.v1.cri"] sandbox_image = “XXXXXXXX.amazonaws.com/eks/pause:3.5<http://XXXXXXXX.amazonaws.com/eks/pause:3.5>" [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc] runtime_type = "io.containerd.runc.v2" [plugins."io.containerd.grpc.v1.cri".containerd.runtimes.runc.options] SystemdCgroup = true [plugins."io.containerd.grpc.v1.cri".cni] bin_dir = "/opt/cni/bin" conf_dir = "/etc/cni/net.d" Thanks in advance. Puvi Ganeshar

3 4

Error processing tar file(exit status 1): lsetxattr /dev/initctl: operation not permitted
by GHui Wu 26 Sep '22

26 Sep '22

I can pull centos:7.9.2009, but I cannot pull mysql:8.0.30. $ podman pull docker.io/library/centos:7.9.2009 Trying to pull docker.io/library/centos:7.9.2009... Getting image source signatures Copying blob 2d473b07cdd5 done Copying config eeb6ee3f44 done Writing manifest to image destination Storing signatures eeb6ee3f44bd0b5103bb561b4c16bcb82328cfe5809ab675bb17ab3a16c517c9 $ podman pull docker.io/library/mysql:8.0.30 Trying to pull docker.io/library/mysql:8.0.30... Getting image source signatures Copying blob f5227e0d612c done Copying blob a1fa3bee53f4 done Copying blob 7627573fa82a done Copying blob a44b358d7796 done Copying blob 051f419db9dd done Copying blob 95753aff4b95 done Copying blob d803d4215f95 done Copying blob f26212810c32 done Copying blob b4b4368b1983 done Copying blob d5358a7f7d07 done Copying blob 435e8908cd69 done Error: writing blob: adding layer with blob "sha256:051f419db9dd9462e8995886d24f592c26cef792cc915dfbc7548e0b19aa55fe": Error processing tar file(exit status 1): lsetxattr /dev/initctl: operation not permitted

3 3

rootless container needs to access private key stored on host
by Mikhaël MYARA 15 Sep '22

15 Sep '22

dear all, I work on a podman container for postfix + dovecot. On my host, the encrypt keys (including the private key) are stored in /etc/letsencrypt/live/xxxxx.xxx/, and these keys have to be used by both postfix and dovecot. However the "/etc/letsencrypt/live" folder is only accessible by root, so that when I share the /etc/letsencrypt folder using the -v option, the container has no access to the live folder. Of course, if I do awful things like chmod 777 on the /etc/letsencrypt/live folder everything is ok. But of course it is not a good way for that. I wanted to know what I should do to avoid this chmod 777 while working with a rootless container. Can I map the volume using root ? (and if so is it a good idea ?) Should I play with groups on the host (= a group called like "encrypters", that may contain only root and the user that runs the container ?) Or a root process that performs copies of the keys ? I also have seen the "--secret" option for podman I did not understad If it would solve my problem. Please also notice that the "let's encrypt" keys are re-generated sometimes because they have a 1 month lifetime. If there is some guideline somewhere about this topic please show me. My host is ubuntu 22.04, and the podman version is 3.4.4. I don't use SE linux for now. Thanks a lot, Mike

4 8

delayed autostart of containers - ?
by lejeczek 15 Sep '22

15 Sep '22

Hi guys. Would you know how, if possible at all, to delay an autostart of a container? My specific scenario is such in which containers- auto-started by systemd - reside under a net mount-point which is mounted at later stage by ha/pcs(so containers fail to start @boot) I'd hope that it's doable without extra & "external" scripts/tools. many thanks, L

4 6