meta-virtualization/recipes-containers/podman
Bruce Ashfield 4778d77f24 podman: update to v5.6.2
Bumping libpod to version v5.6.2-2-g3529cd312f, which comprises the following commits:

    9dd5e1ed33 Bump to v5.6.2
    3b1ae51c60 Release notes for v5.6.2
    aa5595391d Vendor buildah@v1.41.5
    1751612f33 Handle SIGPIPE to prevent machine stuck in Starting state
    a2dda0410c Bump Podman to v5.6.2-dev
    1e2b231515 Bump to v5.6.1
    9812c1f87d Final release notes for v5.6.1
    dcdaaf24be update tests duo to CRUN#1767 to support both values
    f93cad508a Fix a locking bug in that could cause a double-unlock
    bd0386ff56 Add R! to systemd-tmpfiles script for all /tmp dirs
    f532f361c0 [v5.6] Bump c/buildah v1.41.4, c/storage 1.59.1, and ...
    ca994186f0 kube play: don't follow volume symlinks onto the host
    74b2ea3a68 Bump xz to v0.5.15 to pick up a CVE fix
    66eb23b4d1 Preliminary release notes for v5.6.1
    7601c78be3 do not pass [no]copy as bind mounts options to runtime
    26a41ad665 do not pass volume-opt as bind mounts options to runtime
    4e83155959 tests: Get rid of netcat on the host and use Bash's /dev/tcp
    f8800b7fa8 tests: Replace ncat for socat
    8f3fcf7c29 test/e2e: actually start container in startContainer
    bc905f25c3 fix(libpod): truncate long hostnames to correct maximum length
    a366d42c99 Add a release note for 5.6 Rosetta being disabled-by-default
    cd08b088f6 windows: do not convert unconfined seccomp path

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-10-14 12:17:20 -04:00
..
podman podman: remove ptest 2025-06-12 10:40:41 -04:00
podman_git.bb podman: update to v5.6.2 2025-10-14 12:17:20 -04:00
README podman: add test instructions for podman system service 2024-01-19 14:29:24 +00:00

rootless podman

Basic configuration:

https://developers.redhat.com/blog/2020/09/25/rootless-containers-with-podman-the-basics#

% echo "user.max_user_namespaces=28633" > /etc/sysctl.d/userns.conf % sysctl -p /etc/sysctl.d/userns.conf

% useradd -c "yocto" yocto % passwd yocto

% su - yocto

% podman pull alpine % podman run alpine cat /etc/os-release % podman images % podman unshare cat /proc/self/uid_map

podman system service

The podman system service command creates a listening service that answers API calls for Podman, it supports systemd socket activation.

Test with docker-compose (v2):

To be noticed, docker could NOT be installed together with podman, so docker-compose should be built as a standalone tool, remove 'docker-plugin' from its PACKAGECONFIG at build time:

PACKAGECONFIG:remove:pn-docker-compose = "docker-plugin"

% sudo systemctl start podman.socket % git clone https://github.com/docker/awesome-compose.git % cd awesome-compose/postgresql-pgadmin; source .env % sudo docker-compose up -d