- Podman - Podman List Archives

what replaces the -- link
by Michael Biarnes Kiefer 04 Jan '22

04 Jan '22

Hi, I am new to podman. I have this problem: The Docker option *--link* is legacy and doesn't work any-more. Using podman right now I saw that this option should be replaced somehow by *--network *or *--pod*. The thing is I tried several things with --network or --pod but somehow two different containers running (from two different images) can't communicate to each other: Before (when Docker --link still was available): $ podman images REPOSITORY TAG IMAGE ID CREATED SIZE localhost/kiegroup/kie-server-showcase 7.63.0.Final 7de306f0d498 20 minutes ago 1.03 GB localhost/kiegroup/business-central-workbench-showcase 7.63.0.Final 446a00d242c2 10 days ago 1.11 GB podman run -p 8083:8080 -p 8003:8001 -i -t --name business-central-wb kiegroup/business-central-workbench-showcase:7.63.0.Final (runs the 446a00d242c2 container) podman run -p 8088:8080 -i -t --name kieserver-wb --link business-central-wb:kie-wb kiegroup/kie-server-showcase:7.63.0.Final (run 7de306f0d498 container linked to 446a00d242c2) Both Containers could communicate and share different vars. I tried to create a network and run both containers with --network <createdNetwork> or I created a pod and run both containers with --pod <created pod> option, but somehow the running container doesn't share the needed values. I do podman inspect and look to container values - and they are there as expected. What do I wrong? podman version 3.4.4 OS: Fedora 34 ThanX Michael -- Michael Biarnés Kiefer Release engineer EMEA ENG Product-Middleware Red Hat SL Barcelona Spain <https://www.redhat.com> <https://www.redhat.com>

2 2

Interacting with systemd user slice deployments
by Andrew G. Dunn 21 Dec '21

21 Dec '21

I'd posted in a thread with @mheon [0] asking if there was a convention that the podman (or systemd) community would recommend for accessing user accounts that are "daemonized" (e.g. `loginctl enable-linger <user>`). The state of the user for deployment is something like: ``` $ mkdir /containers $ semanage fcontext -a -e /home /containers $ restorecon -vR /containers $ groupadd -g 2000 hedgedoc $ useradd -g 2000 -u 2000 -d /containers/hedgedoc -s /sbin/nologin hedgedoc $ usermod --add-subuids 200000000-200065535 --add-subgids 200000000- 200065535 hedgedoc $ loginctl enable-linger hedgedoc ``` There is a more opinionated longer write up here [1]. Something that I've not been doing is setting a shell and providing access to the user via ssh. This may be weird, but one of the thinks was that by not having a shell, running rootless-as-non-root, the application is pretty isolated. From what we can gather there are a couple options: ## runuser Seems like the most reasonable option, as root or sudo you: $ runuser -ls /bin/bash hedgedoc This will log you in, set the shell to bash, and set your working directory to the users home directory. You can then use the shell to interact with the user slice, invoke podman, invoke podman generate, and daemonize pods/containers. ## su $ su -s /bin/bash hedgedoc This will log you in, set the shell to bash. However doesn't change home directory. Works similar to above, but seems like runuser has more niceness to the experience. ## machinectl This is a bit more weird, but potentially is what systemd _wants_ people to do: $ systemctl --user --machine=hedgedoc@.host <things> This would allow you to interact with user units, you could drop them in place with ansible/pyinfra and then use this `--machine` invocation to examine the state of the unit. - Is this something the podman folks are thinking about, mheon seems to reference it but it was very hard to figure out how to actually invoke. - Is there a way to obtian a shell with this method? Was generally curious to see if anyone would offer opinions on how they are using user slice deployments. I've been watching quadlet [2] with interest as well. [0]: https://github.com/containers/podman/issues/5858#issuecomment-994201667 [1]: https://homelab.dunn.dev/docs/server/containers/ [2]: https://github.com/containers/quadlet

2 1

podman network - incomplete?
by lejeczek 18 Dec '21

18 Dec '21

hi guys. this: -> $ podman network create 11-1-1 --macvlan ens11 --subnet 11.1.1.0/24 --ip-range 11.1.1.24/31 should do more than just: -> $ podman network inspect 11-1-1 [ { "cniVersion": "0.4.0", "name": "11-1-1", "plugins": [ { "ipam": { "type": "dhcp" }, "master": "ens11", "type": "macvlan" } ] } ] if I remember correctly - right? many thanks, L.

1 0

Podman Community Cabal Meeting Thursday December 16, 2021, 11:00 a.m. EST (UTC-4)
by Tom Sweeney 15 Dec '21

15 Dec '21

Hey All! The Podman Community Cabal meeting is happening in just under 24 hours. Thursday December 16, 2021, 11:00 a.m. EST (UTC-4). We'll be talking about Lima and have time for topics of interest. Agenda here: https://hackmd.io/gQCfskDuRLm7iOsWgH2yrg?both. Hope to see you there! t

1 0

Blog solution for podman.io website
by Máirín Duffy 07 Dec '21

07 Dec '21

Hey, a couple of thoughts on the podman.io blog issue brought up during the last Podman community cabal call ( https://podman.io/community/meeting/notes/2021-11-18/) - Summary: Podman has a need for a low-overhead of posting blog posts; the current system involves other websites and platforms and is process-heavy. (Hopefully this is an accurate summary, lmk if not.) - One option would be to use wordpress which has a post-by-email feature... you have to keep the email you send the posts to secret / only share w people authorized to post / otherwise there is no overhead / process to getting posts live. Appears it may be possible to then import the wordpress RSS feed into the existing jekyll site with smtg like this https://github.com/MattKevan/Jekyll-feed-importer - Other option (perhaps better) - use antora instead of jekyll. GitHub pages supports antora, it lets you have a site generated from multi-repos, believe it would enable stuff like taking snippets from the podman repo's docs and pulling into the website in a diff repo. Could create another repo just for informal blog content, give everyone you'd ever want to post a blog full commit access just to that repo, antora can read in from that and use it to generate blog posts on website (and authors wouldn't need commit access to website) Relevant links: - WP post by email https://jetpack.com/support/post-by-email/ - Antora github pages support https://docs.antora.org/antora/2.3/publish-to-github-pages/ - Antora multi-repo functionality https://docs.antora.org/antora/2.3/features/#bring-together-content-from-mu… My experience is with Jekyll and not Antora but I am currently playing around with Antora to see if I can get a multi-repo proof-of-concept together. If someone more technically ept would like to help, let me know :) I am @duffy:fedora.im on Matrix and in the Podman channel! Le meas, ~m

8 9

Podman Community Meeting - Tuesday December 7, 2021, 11:00 a.m. EST (UTC-5)
by Tom Sweeney 06 Dec '21

06 Dec '21

Hi All! The Podman Community Meeting is happening 21 hours from now, on Tuesday Dec 7, 2021, at 11:00 a.m. EST (UTC-5). Podman on Windows, Netavark, Netavark's COPR and more! Free to attend, video link here on the agenda: https://podman.io/community/meeting/agenda/ Hope to see you there! t

1 0

Restart Status for Containers running in Podman
by Christopher.Miller＠gd-ms.com 02 Dec '21

02 Dec '21

Dumb question. I looked thru the mail archive and couldn't find what I was looking for. With Docker, if you inspect the container, you can see a RestartPolicy. Lets you know if the container will restart if the server reboots. We have a container run Podman (version 1.4.2-stable2, yes its older, however its what I have to work with for now), is there a way to tell if restart has been set for a container? Thanks

2 3

Container stopped running
by Ranbir 02 Dec '21

02 Dec '21

Hello, I'm running podmon on an up to date Rocky Linux 8 system. I'm trying to run a rootless container. Before my update to Rocky Linux 8.5, the rootless container was running just fine. After my update and reboot, I keep getting this error: Error: container_linux.go:380: starting container process caused: process_linux.go:545: container init caused: process_linux.go:508: setting cgroup config for procHooks process caused: open /sys/fs/cgroup/user.slice/user-1000.slice/user(a)1000.service/user.slice/ user- libpod_pod_a9292128fc778c6287e80ff71d5e2ee1320b3395dc48a7e31af1db77cc7f 695a.slice/libpod- a7de373d2fef8f5ea232c09e1553923ff1968ff4caef156b997d26910a2d9558.scope/ pids.max: no such file or directory: OCI runtime attempted to invoke a command that was not found I did enable lingering for the "containers" user and created the file /etc/systemd/system/user@.service.d/delegate.conf. I've run "systemctl daemon-reload" after rebooting. I'm also exporting XDG_RUNTIME_DIR in the user's .bashrc. None of this seems to be working now, though it did stop similar errors before the update. Does anyone know why the pids.max cgroup isn't being created now? -- Ranbir

2 7

Anyone interested in helping to convert the Ubuntu Discourse Docker setup to Fedora Podman?
by Philip Rhoades 02 Dec '21

02 Dec '21

People, I cloned this: https://github.com/discourse/discourse_docker and did a "podman build" on the Dockerfile and it made it to step 39 (of 59) before stopping with a complaint about a missing dir . . It would be great to get a Fedora Podman Discourse container going (in a separate exercise some time ago I was able to get a development-only version going but I eventually gave up on the too-hard production version) - anyone interested in helping / advising? Thanks, Phil. -- Philip Rhoades PO Box 896 Cowra NSW 2794 Australia E-mail: phil(a)pricom.com.au

3 3

Podman Community Meeting next Tuesday, December 7, 2021, 11:00 a.m. EST (UTC-4)
by Tom Sweeney 01 Dec '21

01 Dec '21

Hey All! The Podman Community Meeting will be next Tuesday, December 7, 2021, at 11:00 a.m. EST (UTC-4). So far, only one topic, a Podman on Windows Demo. Hit me up if you have a topic! Video Conference: https://bluejeans.com/880216278/2568 Hope to see you there! t

2 1