podman | 易学教程

Run privileged podman without sudo (and without usernamespace)

阅读更多关于 Run privileged podman without sudo (and without usernamespace)

问题 I installed podman on RHEL 7.6 and can run normal docker command with sudo sudo podman run hello-world Is there a way to run it without sudo, without using usernamespace (similar to adding your user to the docker group when using regular docker command)? I understand that when run as a non-root user, podman uses usernamespace. But I am not able to enable/ setup suid on the machine (LDAP etc.) Currently, when run as a non-root user, I get this user namespaces are not enabled in /proc/sys/user

There is any “Podman Compose”?

阅读更多关于 There is any “Podman Compose”?

问题 I recently found out about Podman (https://podman.io). Having a way to use Linux fork processes instead of a Daemon and not having to run using root just got my attention. But I'm very used to orchestrate the containers running on my machine (in production we use kubernetes) using docker-compose. And I truly like it. So I'm trying to replace docker-compose. I will try to keep docker-compose and using podman as an alias to docker as Podman uses the same syntax as docker: alias docker=podman

Cannot `ssh` from container with `openvpn`

阅读更多关于 Cannot `ssh` from container with `openvpn`

问题 Basic setup Using: Fedora 30, fully upgraded (kernel 5.1.19) Podman 1.4.4 I have this Dockerfile: FROM fedora:30 ENV LANG C.UTF-8 RUN dnf upgrade -y \ && dnf install -y \ openssh-clients \ openvpn \ slirp4netns \ && dnf clean all CMD ["openvpn", "--config", "/vpn/ovpn.config", "--auth-user-pass", "/vpn/ovpn.auth"] Which I build with: podman build -t peque/vpn . Now, in order to be able to run it successfully, I have to take care of some SELinux issues (see Connect to VPN with Podman). Fixing

There is any “Podman Compose”?

阅读更多关于 There is any “Podman Compose”?

I recently found out about Podman ( https://podman.io ). Having a way to use Linux fork processes instead of a Daemon and not having to run using root just got my attention. But I'm very used to orchestrate the containers running on my machine (in production we use kubernetes) using docker-compose. And I truly like it. So I'm trying to replace docker-compose. I will try to keep docker-compose and using podman as an alias to docker as Podman uses the same syntax as docker: alias docker=podman Will it work? Can you suggest any other tool? I really intend to keep my docker-compose.yml file, if