Questions tagged [podman]
Podman is a daemonless container engine with a docker-compatible command line
61
questions
0
votes
0
answers
29
views
docker registry behind nginx reverse proxy with authentication and ssl
I'm trying to push images remotely to my private docker registry, which fails like this:
$ podman push sub.example.com:5000/dummyimg sub.example.com:5000/rem/dummyimg
Getting image source signatures
...
0
votes
2
answers
105
views
How to configure a podman container to let it communicate with the host as well?
Is it possible to...
run a container with podman
which has an IP on the same subnet that the host is on
is accessible from every other host on the subnet
including the host itself?
I had partial ...
- 7,788
0
votes
0
answers
81
views
Established TCP connection but no data is returned
I'm running a simple registry with podman and bind it to a local private IP address.
podman container create \
--name insecure-registry \
--privileged=True \
--env REGISTRY_HTTP_ADDR=0.0.0.0:...
- 187
0
votes
0
answers
158
views
Firewalld apply port redirection from rootless Podman containers to host
Is there a way to redirect ports for traffic that originates from the host or a Podman container and is destined for the host or another Podman container using Firewalld?
My use case: I am hosting a ...
- 101
0
votes
0
answers
240
views
Can I set proxy in Podman so capture all requests from container?
In my case I have an Nginx server in the pod, which is quite hard to debug when I encounter problems in using proxy_pass. Can I set Podman to use use Proxyman or Charles so that I could see all ...
- 101
0
votes
1
answer
608
views
Podman fails pushing image to AWS ECR repository with: Error: writing blob: Post
I have issues trying to push an image I created with podman to an ECR container I have.
The issue doesn't seem to be related to permissions or authentication and I am struggling to find similar issues ...
0
votes
0
answers
59
views
Podman rootless mode to install multiple php_cli versions on a server
I have a Debian server with multiple users. I would like to enable them to use multiple versions of PHP-CLI.
I know I could use ondrej PPA, but I am not very comfortable adding unofficial apt sources.
...
- 505
0
votes
0
answers
229
views
Cockpit using Nginx - with private ip only
Context:
I have an ec2 ubnutu 20.04.5 LTS instance - which sits in a vpc with no public ip.
On that, I have nginx:1.23.2 running in a container and cockpit installed directly on the host.
The way it ...
- 101
2
votes
1
answer
957
views
podman: map container user to host user for shared volume permissions
I am trying to set up gitea using podman. I would like to have
the data volume mapped to a host directory, because it allows me to easily inspect and backup the data
the container process executed by ...
- 1,644
0
votes
0
answers
74
views
Initialization of Samba Active Directory in Podman fails
I have created a Samba Active Directory PDC that runs inside a Podman container.
I was trying to working on how to restore the server from an offline backup, when I encountered something unexpected on ...
0
votes
1
answer
295
views
Can't restart podman container
I have installed a mtproto-proxy container:
# podman container list
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS ...
- 395
0
votes
0
answers
306
views
Singularity vs. Podman for HPC workloads?
Singularity is said to work well for HPC workloads. RedHat is making an effort to make Podman more usable for HPC, e.g. it (and I presume this is with their ubi8 image) is said to work with MPI. That'...
0
votes
1
answer
341
views
podman: mount a file system during image build
Using podman/buildah, I want to build a container image that has host file systems already mounted.
I am able to do this with Singularity with sudo singularity build /tmp/lolcow.simg /tmp/lolcow....
0
votes
0
answers
1k
views
Podman is unable to start container with SELinux (sd-bus call permission error)
Here is the command I am using to start the container:
podman run -d --name busybox-top -v ./src:/dest:Z busybox top
Error:
Error: sd-bus call: Permission denied: OCI permission denied
I do not have ...
- 917
3
votes
1
answer
451
views
What's the difference between rootless Docker, running a container as a non-root user, and Podman?
Recently I've been trying to run my Docker application as a non-root user. I've seen there are several options available to me:
Install rootless Docker : apparently this is a "non-root" ...
- 145
1
vote
1
answer
3k
views
Podman (or docker) running a MySQL container and a shared data directory
I am running a Ubuntu 20.04.5 LTS virtual machine for my development environment. In the past I have run multiple VM's to host databases, web servers, etc, as I need them for projects. So in short,
I ...
- 13
1
vote
0
answers
128
views
Moving folders while building a podman container
I am creating a container for Podman that runs Samba Active Directory as a Primary Domain Controller and with Bind DNS backend.
It is based of a previous container that I made which had volume ...
2
votes
2
answers
630
views
Running amd64 UBI9 images with podman on Apple Silicon
I'm trying to run an amd64 UBI9 image on Apple silicon with Podman. Podman provides a Fedora CoreOS VM to run containers in. It allows for installing qemu binaries to run "foreign architecture&...
- 10.4k
0
votes
1
answer
2k
views
Installing podman on Amazon Linux 2
I am trying to install podman on an Amazon Linux 2 instance
cat /etc/os-release
NAME="Amazon Linux"
VERSION="2"
ID="amzn"
ID_LIKE="centos rhel fedora"
...
- 145
1
vote
1
answer
4k
views
podman: why need host network mode
As per man podman-run container's network can be configured in the host mode:
--network=mode, --net
...
host: Do not create a network namespace, the container will use the host’s network. Note: The ...
- 249
1
vote
1
answer
1k
views
podman container with public IPv6
I have got a server with IPv4 address and IPv6 /64 subnet (let's say 2001:db8::/64), both public. Server itself has the following IPv6 address: 2001:db8::1/64. The gateway is fe80::1 (which causes ...
- 111
0
votes
0
answers
631
views
How to close podman exposed port on public interface
I have running AdGuardHome instance on podman with WebUI port -p 8053:80.
# podman port -a
1aeb8e800717 53/tcp -> 0.0.0.0:53
1aeb8e800717 853/tcp -> 0.0.0.0:853
1aeb8e800717 5443/tcp -&...
- 1
0
votes
1
answer
368
views
How to assign a static IP with molecule-podman?
As the generated inventory look like a pair of instance name - ip (see above), I need to test recipe using the variable ansible_host with an IP value and not the instance name.
So the generated ...
- 166
0
votes
1
answer
431
views
Ansible - No such file error when activating systemctl Podman user socket
I am running an Ansible playbook on a fresh Oracle Linux 8 system. It includes a step where it asks systemctl to activate a user Podman socket like so:
- name: Enable podman socket
vars:
userid:...
- 845
0
votes
1
answer
109
views
Can the Docker or Podman clients running on MacOS/Windows use a remote server to build/run containers?
With MacOS and Windows as the clients and I would like to be able to have an address on my network (local or public) handle the container build steps and running the container.
So when I run something ...
- 101
0
votes
0
answers
392
views
Remove default docker registry and put prefix to pull images in Openshift 4.7
I know we can add registry name before image name. like docker pull my_registry/myimage:latest. But by default it looks in docker hub. Is there anyway to remove docker hub from default or add a prefix ...
1
vote
1
answer
1k
views
podman container fails to start: mkdir journal dir permission denied
I had some containers running smoothly in Centos 8.2 with podman. After upgrading to Centos 8.5, I found several of the containers failing to run. In the command line, I see this:
$ podman run --name=...
- 11
1
vote
0
answers
204
views
mariadb is not running after restart Openstack train
I have a OpenStack train deployment with a single controller node. disk went full I deleted the cinder-volumes loop file after reboot nothing is working because all the services are unable to connect ...
1
vote
0
answers
2k
views
minikube on macos with m1 darwin without docker
Ok, in my search for a development environment without docker desktop, I am exploring minikube.
The issue is that minikube (at the time of writing) cannot run on macos with m1 chip because hyperkit is ...
- 415
0
votes
1
answer
1k
views
How to change the default infra container in Podman?
I am trying to use podman-compose to spin up an environment. The env is air gapped from the internet and uses a local docker registry to pull images.
The issue is when I run podman-compose up, it ...
- 151
0
votes
1
answer
177
views
podman load executed in systemd service not taking effect on fcos system
Hi I'm new to FedoraCoreOs. But I'm trying a very simple probe of concept. I'm trying to load a .tar docker image into the fedora core os local registry at starup. I'm using systemd and a service ...
1
vote
1
answer
2k
views
setting up k8s cluster with podman
I want to set up my first kubernetes cluster for learning purposes.
I have 3 lxc containers running AlmaLiunx 8.4 *one should become the controller, the remaining 2 will become worker nodes.
As a ...
- 257
4
votes
2
answers
3k
views
podman: rootless container: permissions for container user
In nginx podman container nginx user is used to run nginx server.
On the host machine ls -alh:
drwxrwx--- 2 myuser myuser 4.0K Aug 10 22:23 .
drwxrwx--- 3 myuser myuser 4.0K Aug 10 22:59 ..
-rw-rw---- ...
- 41
1
vote
1
answer
420
views
systemd terminates etcd service started with podman - reception only permitted for main PID
I try to start etcd as a systemd service run in a container with podman.
After start I get this error log from systemd:
systemd[1]: etcd.service: Got notification message from PID 4696, but reception ...
- 1,177
0
votes
1
answer
512
views
Create a containerized reverse proxy with multiple sites on a separate IP Address
I administer a small cluster which has several different services running, including grafana monitoring as a container, cloud file storage as a container (nextcloud), and a FreeIPA server on bare ...
- 1
-1
votes
1
answer
80
views
Mount container's filesystem on my host
I built some software in a container (using Podman) and would like to run the binary on my host. The binary is linked to some dynamic libraries that I don't have on my host. I figured that a quick ...
- 101
1
vote
1
answer
875
views
Podman rootless container: Accessing external volumes is cumbersome
I want to access directories on the host system from inside a rootless podman container.
When using external volumes with podman rootless containers, the user who accesses the external volumes has a ...
- 143
2
votes
0
answers
381
views
RHEL 8.2 podman rootless container network bottleneck at 20Mbits/s
When I run container by podman 1.6.4 on RHEL8.2 (fresh install) with rootless user.
The maximum upload speed per container will be around 22Mbits/s (with 1Gbits/s network)
After start a second process,...
- 151
2
votes
0
answers
951
views
Setting up Lavarel with Podman, but the php user can't write to my mounted directory
I've set up a laravel project on Fedora using Podman. For this I wrote a small script that attempts to replace the build process usually done by sail.
#!/usr/bin/env bash
if [ -f ./.env ]; then
# ...
- 121
1
vote
0
answers
851
views
Podman not using credentials from authfile
I am in the process of deploying a containerized application that is created from an image stored in a private registry that requires authentication to access.
Since I am using Ansible 2.9.14 I must ...
- 11
0
votes
1
answer
1k
views
Podman fails to add container to a pod [firewalld, nftables]
Can't start a podman container nor can I add container to a pod on CentOS8.
I've tried the usual actions, e.g.:
Made sure I am starting with clean state:
sudo podman system reset which has deleted ...
- 1
1
vote
0
answers
320
views
podman rootless virtual subnet with containers externally accessible by IP, is this possible?
Goal
Setup a virtual network in which multiple containers are started
each container should be accessible by its IP from the host network
the containers run rootless (it is intended to run the test ...
- 71
1
vote
0
answers
234
views
Connect two bridges only works in one direction
I have a Centos8 host with libvirt (KVM) and podman (1.6) installed.
libvirt brought a bridge called "virbr0" and guests will be attached to with an address from range 192.168.122.0/24. ...
- 11
1
vote
0
answers
613
views
Why are my Kubernetes worker nodes attempting to pull the infra-pod image when kubelet is run with container-runtime remote?
I have a set of worker nodes that are successfully joining my K8s cluster, but they are failing to schedule any pods due to their inability to pull the infrapod image from the internet. Our cluster is ...
- 131
2
votes
1
answer
1k
views
Environment variables propagation in podman
I'm running a simple Kubernetes deployment descriptor with podman play kube and some of my services need env vars to be set. In Docker Compose/Swarm I could just place the names of env-vars to the ...
- 145
0
votes
1
answer
2k
views
How can I forward IPv6 port 80/443 to a podman container?
I recently containerized my personal webserver. However, I've now noticed that it's no longer accessible over IPv6. Port mapping (-p 80:80 -p 443:443) only works for IPv4: https://github.com/...
- 119
2
votes
1
answer
1k
views
Podman rootful containers not accessible by haproxy loadbalancer
I have created two networks in podman, "backend" and "frontend".
NAME VERSION PLUGINS
podman 0.4.0 bridge,portmap,firewall,tuning
backend 0.4.0 bridge,portmap,...
- 23
1
vote
0
answers
1k
views
Host SSH tunnel access from within rootless container run by Podman
Background
System is running a rootless container based upon the docker.io/rocker/shiny-verse:latest image that publishes a port (say 8000) for remote web connections (to access the shiny ui). The ...
- 11
0
votes
0
answers
928
views
PiHole container on Podman fails to start with SELinux enabled on Fedora 31
I'm trying to get PiHole up and running using Podman on Fedora 31 Server.
When I set SELinux to Permissive mode, and I use the following command, everything works perfectly.
sudo podman run -d --...
- 111
0
votes
2
answers
3k
views
Podman rootless journald logging
I'm trying to log to the host's systemd-journald from a rootless podman-container.
When i run the container as root with the --privileged flag, i can read the logs from the container on the host with ...
- 1