On 6/22/21 16:14, Hendrik Haddorp wrote:
Hi,
I want to run a build job inside a podman container. This is only done to have better control on what tools and versions of those are installed. I'm not interested in any isolation or security and would ideally like my my user id, groups and so on to stay the same as on the host. So far things look quite promising when using these flags: --cgroups=disabled --net=host --annotation=run.oci.keep_original_groups=1 --security-opt label=disable
Is there any easier / better way to achieve this kind of thin "isolation"?
regards, Hendrik _______________________________________________ Podman mailing list -- podman@lists.podman.io To unsubscribe send an email to podman-leave@lists.podman.io
With podman 3.2 you can do. podman run --privileged --userns=keep-id --group-add keep-groups --net=host --cgroups=disabled You could also add --pid=host --ipc=host Or look at toolbox, which wraps podman to make user containers for developers.