- Podman - Podman List Archives

Podman Community Meeting Agenda - Tues April 6, 2021 8:00 p.m. EDT (UTC-4)
by Tom Sweeney 25 Mar '21

25 Mar '21

Hi All, We've just posted the agenda for the next Podman Community Meeting here: https://podman.io/community/meeting/agenda/. The topics will include: A Podman v3.1 preview, the new U volume flag to chown source Volume, a Podman on Mac Preview and and Open Forum. As a reminder, the meeting this time is moving from it's normal 11:00 a.m. time slot to 8:00 p.m. to hopefully make it easier to attend for our Asian-Pacific community. We will be recording the meeting so you can watch it later if you can't make it, and we will be returning to our 11:00 a.m. Eastern time on Tues May 4th. We hope to see a number of new faces at this community meeting! t

1 0

is rootless macvlan possible?
by lejeczek 24 Mar '21

24 Mar '21

Hi guys. I suppose not since I see this: -> $ podman container start alpine WARN[0000] Failed to add podman to systemd sandbox cgroup: dial unix /run/user/0/bus: connect: permission denied ERRO[0000] error starting some container dependencies ERRO[0000] "command rootless-cni-infra [alloc ab3ff4b8851d42203b745987183c5b0c9255be3a127c488550c7d9305dcff3a2 host_for-cni chatter-drunk 10.0.2.26?? ] in container f086e66e64767efbac7aded808e1dcd18b27a203a0f1e2a1b711137706ba64c4 failed with status 1, stdout=\"\", stderr=\"Link not found\\n\"" Error: unable to start container "e65d59606f8fbb83165911de31c9977776e341bfc620e132e94e6c30c37fc6be": error starting some containers: internal libpod error unless it's a bug of some sort, but if limitation by design - is it possible to overcome/tweak it and have a "regular" user create and use macvlan network such as here: { ?????? "cniVersion": "0.4.0", ?????? "name": "host_for-cni", ?????? "plugins": [ ?????????????? { ?????????????????????? "ipam": { ?????????????????????????????? "ranges": [ ?????????????????????????????????????? [ ?????????????????????????????????????????????? { ?????????????????????????????????????????????????????? "gateway": "10.0.2.254", ?????????????????????????????????????????????????????? "rangeEnd": "10.0.2.254", ?????????????????????????????????????????????????????? "rangeStart": "10.0.2.2", ?????????????????????????????????????????????????????? "subnet": "10.0.2.0/24" ?????????????????????????????????????????????? } ?????????????????????????????????????? ] ?????????????????????????????? ], ?????????????????????????????? "routes": [ ?????????????????????????????????????? { ?????????????????????????????????????????????? "dst": "0.0.0.0/0" ?????????????????????????????????????? } ?????????????????????????????? ], ?????????????????????????????? "type": "host-local" ?????????????????????? }, ?????????????????????? "master": "eth3", ?????????????????????? "type": "macvlan" ?????????????? }, ?????????????? { ?????????????????????? "capabilities": { ?????????????????????????????? "mac": true ?????????????????????? }, ?????????????????????? "type": "tuning" ?????????????? } ?????? ] } many thanks, L.

2 3

setting pids limit
by Ed Haynes 24 Mar '21

24 Mar '21

I'd like to limit the number of pids a container can consume on RHEL 8.3 to provide protection against things like bash fork bombs. Ideally I would want to do this in a rootless container but when I do $ podman run -it -u user1 --pids-limit 42 frog I get: Error: container_linux.go:370: starting container process caused: process_linux.go:459: container init caused: process_linux.go:422: setting cgroup config for procHooks process caused: cannot set pids limit: container could not join or create cgroup: OCI runtime error I can however run the same podman command as root without issue. Is there a method to do this as non root? Or a better solution using systemd? Thanks, Ed -- Ed Haynes SOLUTIONS ARCHITECT Red Hat <https://www.redhat.com/> ehaynes(a)redhat.com *M: (978)-551-0057 * TRIED. TESTED. TRUSTED.

2 3

podman containers access local network/vlan
by andrewm659＠yahoo.com 23 Mar '21

23 Mar '21

I am trying to setup podman containers to be accessible from the local LAN or the same VLAN as my prod VMs. I have created a /etc/cni/net.d/ct-host.conflist { "cniVersion": "0.4.0", "name": "host_local", "plugins": [ { "type": "macvlan", "master": "ens192", "ipam": { "type": "host-local", "ranges": [ [ { "subnet": "10.150.10.0/23", "rangeStart": "10.150.10.10", "rangeEnd": "10.150.11.254", "gateway": "10.150.10.1" } ] ], "routes": [ {"dst": "0.0.0.0/0"} ] } }, { "type": "tuning", "capabilities": { "mac": true } } ] } I then start my podman instances (specifically pihole) like this: sudo podman run --name=pihole --dns=1.1.1.1 -e TZ=America/Chicago -e SERVERIP=10.150.11.41 -e ServerIP=10.150.11.41 -e WEBPASSWORD=supersecret -e DNS1=1.1.1.1 -e DNS2=1.0.0.1 -e DNSSEC=true -e CONDITIONAL_FORWARDING=true -e CONDITIONAL_FORWARDING_IP=10.150.10.1 --mac-address 00:0c:29:af:2b:79 -e CONDITIONAL_FORWARDING_DOMAIN=lan -e TEMPERATUREUNIT=f -v pihole_pihole:/etc/pihole:Z -v pihole_dnsmasq:/etc/dnsmasq.d:Z docker.io/pihole/pihole But I can't get to the pihole IP address after it launches. Any help?

1 0

nftables
by lejeczek 23 Mar '21

23 Mar '21

Hi guys. I'm hoping an experts may share some thoughts.. Centos 7 container(macvlan) where I try to use 'nft' is not happy: [root@baseos-c8kubernode1 /]# nft add table inet filter Error: Could not add table: Operation not permitted add table inet filter Is that possible and I'm missing some bits I should setup up a container with? many thanks, L.

2 2

How to Buy the Best Dose of CBD For Maximum Health Benefits
by wbhmichaellaramsy＠gmail.com 18 Mar '21

18 Mar '21

If you are looking for the best CBD gummies for pain and other uses, then look no further than these CBD gummy bear products. These products have taken the world of health by storm. More people are taking the plunge into buying these CBD edible products as opposed to taking prescription pain medication. People around the world are waking up each day grateful they don't have to deal with the side effects of prescription drugs. They are starting to make the right decision when it comes to treating their own illnesses and pains. Some of the best CBD gummy bears in the world are the Caramel Chocolate and Caramel Apple flavors. Both of these flavors offer users unique health benefits when it comes to losing weight. The Caramel Chocolate flavor is a uni-sweet, semi-sweet, dark chocolate that offers up to sixty percent of the recommended daily allowance of theobromine. This sweetener is a natural stimulant that can reduce headaches, improve mood, and aid in weight loss. Some people take gummy bears that contain ephedra to get high as well. They are taking a harmful substance in hopes of beating their addiction to caffeine by mixing it with a healthy product. This is not a good idea and can lead to dangerous side effects. The Caramel Apple product offers up to two grams of theobromine per every single serving. Many people like this because it tastes so great, but some people don't enjoy the taste at all. These products also contain a plethora of other benefits and are the best CBD gummies out there. You can experience all of the benefits of gummies without getting a buzz, without becoming addicted, without increasing your heart rate, and without feeling any jitters or anxiety. If you're trying to get healthy, reduce your stress level, and feel more energized, try the Caramel Apple! They're great all around snacks and delicious treats. If you're looking for a healthy alternative to sugar and carbohydrates, the Caramel Apple is one of the best ways to do it. There are many different CBD products out there that are great to help people sleep and curb their anxiety levels. Gummy bears, tablets, and even energy drinks are just a small part of what you can get out of these products. Try shopping for these gummy bears today! If you love chocolate and want to take a healthy, natural approach to curb your hunger, you'll love the Caramel Apple. With its high-quality gummy bear base, it provides a satisfying crunch while supplying high-quality, sustained energy throughout the day. This delicious gummy bear is made with Simpler Raw High-Residue Chocolate from New Zealand. Other popular brands include; Ganocafe, Strudel's Goji Berry Power, and My-Cap Ultra. These are just three of the best brands of CBD gummies available, and all offer high-quality gummy bear options for anyone looking to benefit from a healthy diet and high-quality exercise. There are many different places to purchase CBD gummies. You can try searching Google, Yahoo, or eBay for where to buy them. But my favorite place to purchase these absolutely top-notch gummies is through my website! I have been selling healthy, organic snacks and gifts for more than seven years, and I know from experience that you won't find a better source of CBD. When you're ready to start stocking your kitchen with some awesome gummies, make sure you search for "CBD gummies near me" so you can choose the best dosage to suit your individual needs! Source: https://www.webehigh.com/best-cbd-gummies/

2 1

podman-docker package for Debian
by Thomas 17 Mar '21

17 Mar '21

Hello, based on the announcement regarding RESTful API here <https://podman.io/blogs/2020/06/29/podman-v2-announce.html> I want to install package podman-docker. Please your please advise how to install this package on Debian? Regards Thomas

5 4

How to run Podman service in rootless mode with Debian 10
by Thomas 16 Mar '21

16 Mar '21

Hello, I have installed Podman version 3.0.1 on my Debian 10 system: locadmin@pc4-pve:~$ podman -v podman version 3.0.1 Based on the announcement regarding RESTful API here <https://podman.io/blogs/2020/06/29/podman-v2-announce.html> I want to have podman service in $XDG_RUNTIME_DIR/podman/podman.sock. However, there's 1 problem: Directory /run/user/1000/podman and file podman.sock does not exist. locadmin@pc4-pve:~$ ll /run/user/1000/ total 0 srw-rw-rw- 1 locadmin locadmin 0 Mar 14 11:25 bus drwx------ 2 locadmin locadmin 40 Mar 14 11:28 containers drwx------ 3 locadmin locadmin 60 Mar 14 11:28 dbus-1 drwx------ 2 locadmin locadmin 140 Mar 14 11:25 gnupg drwx-----T 2 locadmin locadmin 40 Mar 14 11:28 libpod srw-rw-rw- 1 locadmin locadmin 0 Mar 14 11:25 pk-debconf-socket drwxr-xr-x 3 locadmin locadmin 100 Mar 14 11:28 systemd Please advise how to fix this error. Regards Thomas

2 1

Writting a Podman client using the OpenAPI specifications
by Tristan Cacqueray 08 Mar '21

08 Mar '21

Hi folks, I've been writting a client from scratch using the OpenAPI specifications, here is some information others might find useful. The specification contains incomplete or incorrect definitions. Most of the definitions are missing the required field list, for example, the SpecGenerator does not indicate that the image name is required. And here is an example of an incorrect definition: https://github.com/containers/podman/issues/9578 The definitions location is not always consistent. Most of them are in the top level `definitions` map, but some are defined differently. For example: - ExecConfig is specified in the path body, instead of using a schema reference. - LibpodImagesPullResponse is defined in the `responses` map, but it just references another definition, causing an extra indirection. Some endpoints need custom logic, for example: - container/attach upgrades the connection to a tcp stream using a binary format (see util.go makeHTTPAttachHeader). - container/logs returns a binary chunked stream. - images/pull returns a raw list of json objects. - exec/start returns a raw integer. API versioning does not seem to be implemented, and the current version number is unclear. Thus, generating the client code using swagger-codegen does not work well. Instead, I wrote a custom script to process and fix the definitions one endpoint at a time. I was able to cover a significant amount of the endpoints and you can see a preview of the client here: https://docs.softwarefactory-project.io/podman-haskell/ Regards, -Tristan

1 0

March 2, 2021 Podman Community Meeting notes are posted
by Tom Sweeney 08 Mar '21

08 Mar '21

Hi All, The notes from last weeks Podman Community meeting were posted earlier today at: https://podman.io/community/meeting/notes/2021-03-02/. Included at the top of that page is a link to the BlueJeans Recording. Our next meeting is Tuesday April 6, 2021 at 8:00 p.m. Eastern (UTC-4). We've shifted it to the early evening US East Coast time to hopefully let some of the Asia Pacific folks attend at a more palatable hour. Also one last reminder for the Container Plumbing Conference that starts tomorrow at 9:30 a.m. Eastern (UTC-5) and then again on Wednesday at the same time. We had issues with the registration showing "full" last week, but that has since been fixed. If you've not registered, I hope you do! https://containerplumbing.org/ Best Wishes, t

1 0