Hello, I have setup 3 rootless containers in a pod and now want to expose ports on two containers to the outside world. I have tried: podman pod create \ --name "${ABCPOD}" \ --label "${ABCPOD}" \ --network slirp4netns:port_handler=slirp4netns \ --publish 8080:8080 but now the container exposing port 8080 is failing to get created. How do I create rootless pods and then expose the networking? Thank you in advance. Regards S Sent with [Proton Mail](https://proton.me/mail/home) secure email.
I don't think I have enough information to give you a definitive answer, especially because you don't provide the commands for creating/running the containers. If you do so, maybe we can give better answers. That said, I don't tend to think of containers exposing ports inside the pod; I prefer to just think that the pod exposes the ports. And remember to configure the ports on the creation of the pod for all your needs. On Sat, Oct 26, 2024 at 3:23 AM openbidaaz via Podman < podman@lists.podman.io> wrote:
Hello,
I have setup 3 rootless containers in a pod and now want to expose ports on two containers to the outside world.
I have tried:
podman pod create \ --name "${ABCPOD}" \ --label "${ABCPOD}" \ --network slirp4netns:port_handler=slirp4netns \ --publish 8080:8080
but now the container exposing port 8080 is failing to get created.
How do I create rootless pods and then expose the networking?
Thank you in advance.
Regards
S
Sent with Proton Mail <https://proton.me/mail/home> secure email. _______________________________________________ Podman mailing list -- podman@lists.podman.io To unsubscribe send an email to podman-leave@lists.podman.io
-- Brent Baude Container Runtimes, Podman Architect https://github.com/containers/podman
Hello, Thank you for your response. I based my Podman script upon this Docker script: https://www.kennethballard.com/?p=9410 So the Rootful scripts which works is: ____________________ #!/bin/bash #---------------------- Set Variables ---------------------- # Set MySQL Docker Container Version #MYSQL="docker.io/mysql:lts-oraclelinux9" MYSQL="docker.io/mysql" # Set MySWL Volune Name MYSQLVOLUMEID="guacamole-sql-data" # Set Containers Network Subnet CONTAINERSUBNET=192.168.33.0/24 # Set Containers Network Gateway CONTAINERGATEWAY=192.168.33.1 # Set Container Network Name CONTAINERNETWORKNAME="guacnet" # Set MySQL Root Password SQLRTPASSWORD="Obix01@" # Set MYSQL User Name SQLUSRNAME="xibo" # Set MYSQL User Password echo Contacting Random.org for new 16-character passwords for MySQL root and Guacamole users. root_secure_password=$(curl -s "https://www.random.org/strings/?num=1&len=16&digits=on&upperalpha=on&loweralpha=on&unique=on&format=plain&rnd=new") guac_secure_password=$(curl -s "https://www.random.org/strings/?num=1&len=16&digits=on&upperalpha=on&loweralpha=on&unique=on&format=plain&rnd=new") SQLRTPASSWORD=$root_secure_password # SQL Create Command sql_create="\ ALTER USER 'root'@'localhost' \ IDENTIFIED BY '$SQLRTPASSWORD'; \ CREATE DATABASE guacamole_db; \ CREATE USER 'guacamole_user'@'%' \ IDENTIFIED BY '$guac_secure_password'; \ GRANT SELECT,INSERT,UPDATE,DELETE \ ON guacamole_db.* \ TO 'guacamole_user'@'%'; \ FLUSH PRIVILEGES;" # Set Database Container IP Address DBCIP=192.168.33.2 #---------------------- Create Local Container Volumes ---------------------- echo Create MySQL Volume sudo podman volume create $MYSQLVOLUMEID #---------------------- Create Local Container Network ---------------------- echo Create Container Network sudo podman network create --subnet $CONTAINERSUBNET --gateway $CONTAINERGATEWAY --label mykey=$CONTAINERNETWORKNAME $CONTAINERNETWORKNAME #---------------------- Pull Official MySQL Image From Docker Hub ---------------------- echo Pulling latest stable Docker image for MySQL. sudo podman pull $MYSQL #---------------------- Create MYSQL Container ---------------------- sudo podman run -d \ --name guacmysql \ -e MYSQL_ROOT_PASSWORD=$SQLRTPASSWORD \ -v guacmysql-data:/var/lib/mysql \ --network $CONTAINERNETWORKNAME \ --ip 192.168.33.2 \ --restart unless-stopped \ $MYSQL echo Wait 30 seconds for MySQL to complete start up. sudo sleep 30 echo Initialise MySQL database echo sql_create # sudo podman exec guacmysql \ # mysql --user=root --password=$SQLRTPASSWORD -e "$sql_create" sudo podman exec guacmysql \ mysql --user=root --password=$SQLRTPASSWORD -e "$sql_create" echo init sudo podman exec guacmysql \ mysql --user=root --password=$SQLRTPASSWORD \ --database=guacamole_db \ -e "$(sudo podman run --rm $GUACAMOLE /opt/guacamole/bin/initdb.sh --mysql)" echo SQL Root Password = $SQLRTPASSWORD echo guac usr = $guac_secure_password echo Done. ____________________ Then I adjusted and tried rootless with a Pod: ____________________ #!/bin/bash #---------------------- Set Variables ---------------------- # Set Guacamole Docker Container Version GUACAMOLE="docker.io/guacamole/guacamole:1.5.5" # Set GuacD Docker Container Version GUACD="docker.io/guacamole/guacd:1.5.5" # Set MySQL Docker Container Version MYSQL="docker.io/mysql:lts" #MYSQL="docker.io/mysql" # Set MySWL Volune Name MYSQLVOLUMEID="guacamole-sql-data" # Set Containers Network Subnet CONTAINERSUBNET=192.168.33.0/24 # Set Containers Network Gateway CONTAINERGATEWAY=192.168.33.1 # Set Container Network Name CONTAINERNETWORKNAME="guacnet" # Set Database Container IP Address DBCIP=192.168.33.2 # Set MySQL Root Password SQLRTPASSWORD="Obix01@" # Set MYSQL User Name SQLUSRNAME="guacamole_user" # Set MYSQL User Password # SQLUSRPASSWORD="Xibo01@" # Set MYSQL User Password echo Contacting Random.org for new 16-character passwords for MySQL root and Guacamole users. root_secure_password=$(curl -s "https://www.random.org/strings/?num=1&len=16&digits=on&upperalpha=on&loweralpha=on&unique=on&format=plain&rnd=new") guac_secure_password=$(curl -s "https://www.random.org/strings/?num=1&len=16&digits=on&upperalpha=on&loweralpha=on&unique=on&format=plain&rnd=new") SQLRTPASSWORD=$root_secure_password # SQL Create Command sql_create="\ ALTER USER 'root'@'localhost' \ IDENTIFIED BY '$SQLRTPASSWORD'; \ CREATE DATABASE guacamole_db; \ CREATE USER 'guacamole_user'@'%' \ IDENTIFIED BY '$guac_secure_password'; \ GRANT SELECT,INSERT,UPDATE,DELETE \ ON guacamole_db.* \ TO 'guacamole_user'@'%'; \ FLUSH PRIVILEGES;" # Set Database Container IP Address DBCIP=192.168.33.2 # Set GuacD Container IP Address GUACDIP=192.168.33.3 # Set Guacamole Container IP Address GUACIP=192.168.33.4 # Pod Name export GuacPOD="GuacPod01" #---------------------- Create Local Container Volumes ---------------------- echo Create MySQL Volume podman volume create $MYSQLVOLUMEID #---------------------- Create Local Container Network ---------------------- echo Create Container Network podman network create --subnet $CONTAINERSUBNET --gateway $CONTAINERGATEWAY --label mykey=$CONTAINERNETWORKNAME $CONTAINERNETWORKNAME #---------------------- Create Pod ---------------------- echo Create Pod podman pod create \ --name "${GuacPOD}" \ --label "${GuacPOD}" \ --network slirp4netns:port_handler=slirp4netns \ --publish 9090:8080 echo Start Pod podman pod start "${GuacPOD}" #---------------------- Pull Official Guacamole Image From Docker Hub ---------------------- echo Pulling latest stable Docker image for Guacamole. podman pull $GUACAMOLE #---------------------- Pull Official GuacD Image From Docker Hub ---------------------- echo Pulling latest stable Docker image for Guacd. podman pull $GUACD #---------------------- Pull Official MySQL Image From Docker Hub ---------------------- echo Pulling latest stable Docker image for MySQL. podman pull $MYSQL #---------------------- Create MYSQL Container ---------------------- podman run -d \ --name guac-mysql \ -e MYSQL_ROOT_PASSWORD=$SQLRTPASSWORD \ -v guac-mysql-data:/var/lib/mysql \ --network $CONTAINERNETWORKNAME \ --ip 192.168.33.2 \ --restart unless-stopped \ -p 3306:3306 \ --pod="${GuacPOD}" \ $MYSQL echo Wait 60 seconds for MySQL to complete start up. sleep 60 echo Initialise MySQL database # podman exec guac-mysql \ # mysql --user=root --password=$SQLRTPASSWORD -e "$sql_create" podman exec guac-mysql \ mysql --user=root --password=$SQLRTPASSWORD -e "$sql_create" podman exec guac-mysql \ mysql --user=root --password=$SQLRTPASSWORD \ --database=guacamole_db \ -e "$(podman run --rm $GUACAMOLE /opt/guacamole/bin/initdb.sh --mysql)" echo Creating GuacD container podman run -d \ --name guacd \ --network $CONTAINERNETWORKNAME \ --ip 192.168.33.3 \ --restart unless-stopped \ -p 4822:4822 \ --pod="${GuacPOD}" \ $GUACD echo Creating Guacamole container podman run -d \ --name guacamole \ --network $CONTAINERNETWORKNAME \ --ip 192.168.33.4 \ --restart unless-stopped \ -e GUACD_HOSTNAME=192.168.33.3 \ -e GUACD_PORT=4822 \ -e MYSQL_HOSTNAME=192.168.33.2 \ -e MYSQL_DATABASE=guacamole_db \ -e MYSQL_USER='root'@'localhost' \ -e MYSQL_PASSWORD=$SQLRTPASSWORD \ -e TOTP_ENABLED='true' \ -p 8080:8080 \ --pod="${GuacPOD}" \ $GUACAMOLE echo SQL Root Password = $SQLRTPASSWORD echo guac usr = $guac_secure_password echo Done. ____________________ I also tried with the default Pasta networking: ____________________ #!/bin/bash #---------------------- Set Variables ---------------------- # Set Guacamole Docker Container Version GUACAMOLE="docker.io/guacamole/guacamole:1.5.5" # Set GuacD Docker Container Version GUACD="docker.io/guacamole/guacd:1.5.5" # Set MySQL Docker Container Version MYSQL="docker.io/mysql:lts" #MYSQL="docker.io/mysql" # Set MySWL Volune Name MYSQLVOLUMEID="guacamole-sql-data" # Set Containers Network Subnet CONTAINERSUBNET=192.168.33.0/24 # Set Containers Network Gateway CONTAINERGATEWAY=192.168.33.1 # Set Container Network Name CONTAINERNETWORKNAME="guacnet" # Set Database Container IP Address DBCIP=192.168.33.2 # Set MySQL Root Password SQLRTPASSWORD="Obix01@" # Set MYSQL User Name SQLUSRNAME="guacamole_user" # Set MYSQL User Password # SQLUSRPASSWORD="Xibo01@" # Set MYSQL User Password echo Contacting Random.org for new 16-character passwords for MySQL root and Guacamole users. root_secure_password=$(curl -s "https://www.random.org/strings/?num=1&len=16&digits=on&upperalpha=on&loweralpha=on&unique=on&format=plain&rnd=new") guac_secure_password=$(curl -s "https://www.random.org/strings/?num=1&len=16&digits=on&upperalpha=on&loweralpha=on&unique=on&format=plain&rnd=new") SQLRTPASSWORD=$root_secure_password # SQL Create Command sql_create="\ ALTER USER 'root'@'localhost' \ IDENTIFIED BY '$SQLRTPASSWORD'; \ CREATE DATABASE guacamole_db; \ CREATE USER 'guacamole_user'@'%' \ IDENTIFIED BY '$guac_secure_password'; \ GRANT SELECT,INSERT,UPDATE,DELETE \ ON guacamole_db.* \ TO 'guacamole_user'@'%'; \ FLUSH PRIVILEGES;" # Set Database Container IP Address DBCIP=192.168.33.2 # Set GuacD Container IP Address GUACDIP=192.168.33.3 # Set Guacamole Container IP Address GUACIP=192.168.33.4 # Pod Name export GuacPOD="GuacPod01" #---------------------- Create Local Container Volumes ---------------------- echo Create MySQL Volume podman volume create $MYSQLVOLUMEID #---------------------- Create Local Container Network ---------------------- echo Create Container Network podman network create --subnet $CONTAINERSUBNET --gateway $CONTAINERGATEWAY --label mykey=$CONTAINERNETWORKNAME $CONTAINERNETWORKNAME #---------------------- Create Pod ---------------------- echo Create Pod podman pod create \ --name "${GuacPOD}" \ --label "${GuacPOD}" \ --publish 9090:8080 echo Start Pod podman pod start "${GuacPOD}" #---------------------- Pull Official Guacamole Image From Docker Hub ---------------------- echo Pulling latest stable Docker image for Guacamole. podman pull $GUACAMOLE #---------------------- Pull Official GuacD Image From Docker Hub ---------------------- echo Pulling latest stable Docker image for Guacd. podman pull $GUACD #---------------------- Pull Official MySQL Image From Docker Hub ---------------------- echo Pulling latest stable Docker image for MySQL. podman pull $MYSQL #---------------------- Create MYSQL Container ---------------------- podman run -d \ --name guac-mysql \ -e MYSQL_ROOT_PASSWORD=$SQLRTPASSWORD \ -v guac-mysql-data:/var/lib/mysql \ --network $CONTAINERNETWORKNAME \ --ip 192.168.33.2 \ --restart unless-stopped \ -p 3306:3306 \ --pod="${GuacPOD}" \ $MYSQL echo Wait 60 seconds for MySQL to complete start up. sleep 60 echo Initialise MySQL database # podman exec guac-mysql \ # mysql --user=root --password=$SQLRTPASSWORD -e "$sql_create" podman exec guac-mysql \ mysql --user=root --password=$SQLRTPASSWORD -e "$sql_create" podman exec guac-mysql \ mysql --user=root --password=$SQLRTPASSWORD \ --database=guacamole_db \ -e "$(podman run --rm $GUACAMOLE /opt/guacamole/bin/initdb.sh --mysql)" echo Creating GuacD container podman run -d \ --name guacd \ --network $CONTAINERNETWORKNAME \ --ip 192.168.33.3 \ --restart unless-stopped \ -p 4822:4822 \ --pod="${GuacPOD}" \ $GUACD echo Creating Guacamole container podman run -d \ --name guacamole \ --network $CONTAINERNETWORKNAME \ --ip 192.168.33.4 \ --restart unless-stopped \ -e GUACD_HOSTNAME=192.168.33.3 \ -e GUACD_PORT=4822 \ -e MYSQL_HOSTNAME=192.168.33.2 \ -e MYSQL_DATABASE=guacamole_db \ -e MYSQL_USER=$SQLUSRNAME \ -e MYSQL_PASSWORD=$guac_secure_password \ -e TOTP_ENABLED='true' \ -p 8080:8080 \ --pod="${GuacPOD}" \ $GUACAMOLE echo SQL Root Password = $SQLRTPASSWORD echo guac usr = $guac_secure_password echo Done. ____________________ I have tried accessing Guacamole from http://<host ip address>:8080/guacamole/ I also tried http://<host ip address>:9090/guacamole/ I assume I need to use Pasta ahead of slirp4netns as the latter maybe deprecated. Thank you in advance for your help. Regards,
Once you've exposed ports from the *pod*, that port is exposed from all containers in that pod; you can't specify --publish on the individual containers. On Sat, Oct 26, 2024 at 1:23 AM openbidaaz via Podman < podman@lists.podman.io> wrote:
Hello,
I have setup 3 rootless containers in a pod and now want to expose ports on two containers to the outside world.
I have tried:
podman pod create \ --name "${ABCPOD}" \ --label "${ABCPOD}" \ --network slirp4netns:port_handler=slirp4netns \ --publish 8080:8080
but now the container exposing port 8080 is failing to get created.
How do I create rootless pods and then expose the networking?
Thank you in advance.
Regards
S
Sent with Proton Mail <https://proton.me/mail/home> secure email. _______________________________________________ Podman mailing list -- podman@lists.podman.io To unsubscribe send an email to podman-leave@lists.podman.io
participants (4)
-
Brent Baude -
openbidaaz -
openbidaaz＠protonmail.com
-
Robin Powell