meta-virtualization/recipes-containers/podman
Bruce Ashfield 081ef3c19c podman: update to 5.0.0
Tested with cni:

   root@qemux86-64:~# podman version
   Client:       Podman Engine
   Version:      5.0.1-dev
   API Version:  5.0.1-dev
   Go Version:   go1.22.0
   Git Commit:   177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
   Built:        Thu Mar 21 17:59:57 2024
   OS/Arch:      linux/amd64

   root@qemux86-64:~# rpm -qa | grep cni
   cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64

   root@qemux86-64:~# rpm -qa | grep neta

Tested with netavark:

   root@qemux86-64:~# podman version
   Client:       Podman Engine
   Version:      5.0.1-dev
   API Version:  5.0.1-dev
   Go Version:   go1.22.0
   Git Commit:   177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
   Built:        Thu Mar 21 17:59:57 2024
   OS/Arch:      linux/amd64
   root@qemux86-64:~# rpm -qa | grep netavark
   netavark-1.10.3-r0.core2_64

Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits:

    bfc63cc32 fix remote build isolation when server runs as root
    f32338dfc bump version to v5.0.1-dev
    e71ec6f1d New release: v5.0.0
    6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753
    eb2b16d6d [v5.0] Bump Buildah to v1.35.1
    43b9ea8b9 Adjust to the standard location of gvforwarder used in new images
    4a84f39b3 Switch to 5.x WSL machine os stream using new automation
    a03de4c14 rpm: use macro supported vendoring
    069439820 Bump to v5.0.0-dev
    f8888a13b Bump to v5.0.0-RC7
    2e387df07 Add release notes for v5.0.0-rc7
    d36ce9c2b fix invalid HTTP header values when hijacking a connection
    8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote
    59512272b pkg/machine: make checkExclusiveActiveVM race free
    51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
    412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting
    1ca93f3fb pkg/machine: refresh config after we hold lock
    71320df8e rpm: update containers-common dep on f40+
    e58cb97de Change API socket to be machine name isolated
    dbf38779b Makefile: drop tests-included from validate target
    0fdd83173 Add release notes for v5.0.0
    d7bc7b7b4 do not require policy.json
    82597144b Machine decompress.go refactoring follow-up
    abaa179aa Add target win-gvproxy in winmake.ps1
    4c5d26f6f Add final machine endpoint
    068ddfd19 update API doc version to 5.0.0
    f2af295e4 Bump to 5.0.0-dev
    d26113ca8 Bump to 5.0.0-rc6
    52ed774c2 docs: generate-systemd: add clarification statement
    3d6758a61 docs: quadlet: improve docs on root/rootless dirs
    885dd2add [CI:DOCS] performance: fix URL and kernel version requirement
    e6ac569a1 [CI:DOCS] Remove outdated references
    364813da6 Add note for RHEL 8.5
    e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
    f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
    9b21a5b79 Bump to v5.0.0-dev
    bbad09bb0 Bump to v5.0.0-rc5
    432f4fbf9 Fix Mac CI
    d54a37399 Complete policy.json inclusion
    b234bb55e Bump Buildah to v1.35.0
    5d3a19f8d podman compose: enable machine socket connection
    6f4ee16d9 [CI:DOCS] Add farm command to commands list
    25f3a8ce7 podman machine start/stop do not write config unlocked
    75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer
    7a7591492 podman machine init: do not write config unlocked
    7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter
    5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users
    4c6505be5 Fix the logic for detecting an unexpected close error
    81906081e vendor libhvee-0.7.0
    3c9c5be7d podman machine set: change options only locked
    a65b546c6 Remove copySparseFile
    2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath
    724c5a06b Don't read full VM File before decompressing
    ff81cf7c7 [CI:DOCS] Fix windows installer action
    4d2fc293c machine: make more use of strongunits
    92b67a69a Fix wrong units size return
    79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c
    d6d260174 [CI:DOCS] Migrate podman container image
    a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0
    39851a0b9 CI: try to fix more flakes
    835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package
    945995be1 e2e: fix potential race in file-locks test
    02403c2e6 Makefile: podman should have correct selinux label
    9ee96a956 properly implement pull-error event status
    155cd463d fix(deps): update module golang.org/x/tools to v0.19.0
    6272abbbb Resurrect auto-port reassignment, but for all providers
    ef7727238 Refactor env dir and port functions into new leaf pkgs
    eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0
    3b72f9178 Revert "Expose as-tested Mac/Windows repository state"
    24516f3ef fix(deps): update module golang.org/x/term to v0.18.0
    e8bf9a323 Update podman-for-windows.md
    8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af
    e09444327 machine init: print output to improve UX
    530782e11 logformatter: fixes for Macintosh
    ebce0e71d test/e2e: check for stderr errors in cleanup()
    ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished)
    fc4e16366 Bump to v5.0.0-dev
    bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0
    cfc5b8e0f Bump to v5.0.0-RC4
    185981fa5 Copy past golang/expansion form ks8.io/kubernetes

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-22 18:52:13 +00:00
..
podman podman: Add ptest support for system tests 2022-09-16 11:13:31 -04:00
podman_git.bb podman: update to 5.0.0 2024-03-22 18:52:13 +00:00
README podman: add test instructions for podman system service 2024-01-19 14:29:24 +00:00

rootless podman

Basic configuration:

https://developers.redhat.com/blog/2020/09/25/rootless-containers-with-podman-the-basics#

% echo "user.max_user_namespaces=28633" > /etc/sysctl.d/userns.conf % sysctl -p /etc/sysctl.d/userns.conf

% useradd -c "yocto" yocto % passwd yocto

% su - yocto

% podman pull alpine % podman run alpine cat /etc/os-release % podman images % podman unshare cat /proc/self/uid_map

podman system service

The podman system service command creates a listening service that answers API calls for Podman, it supports systemd socket activation.

Test with docker-compose (v2):

To be noticed, docker could NOT be installed together with podman, so docker-compose should be built as a standalone tool, remove 'docker-plugin' from its PACKAGECONFIG at build time:

PACKAGECONFIG:remove:pn-docker-compose = "docker-plugin"

% sudo systemctl start podman.socket % git clone https://github.com/docker/awesome-compose.git % cd awesome-compose/postgresql-pgadmin; source .env % sudo docker-compose up -d