meta-virtualization/recipes-containers/podman
Bruce Ashfield 82fe694454 podman: update to v5.2.1
Bumping libpod to version v5.2.1-5-g679276e136, which comprises the following commits:

    dbdff97042 Create volume path before state initialization
    628446c88c Update Cirrus DEST_BRANCH
    30f104cf36 Bump to v5.2.2-dev
    d0582c9e1e Bump to v5.2.1
    1cec5dc24e Update release notes for v5.2.1
    8227722c3c [v5.2] Add zstd:chunked test fix
    854e0c2eb4 [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
    8f198092d7 libpod: reset state error on init
    669767c3a9 libpod: do not save expected stop errors in ctr state
    851ec1f81c libpod: fix broken saveContainerError()
    6b45888959 Bump to v5.2.1-dev
    b22d5c61ee Bump to v5.2.0
    3f13c38048 Never skip checkout step in release workflow
    c83c891fb2 Bump to v5.2.0-dev
    028bee289e Bump to v5.2.0-rc3
    23c6e0fb9f Update release notes for v5.2.0-rc3
    784856b6ae Tweak versions in register_images.go
    d6ae7427f7 fix network cleanup flake in play kube
    c0f3ce462c WIP: Fixes for vendoring Buildah
    a8f4c12003 Add --compat-volumes option to build and farm build
    8bc493324a Bump Buildah, c/storage, c/image, c/common
    4fbcece05f libpod: bind ports before network setup
    3f14fcf7c3 pkg/api: do not leak config pointers into specgen
    02a932372b build: Update gvisor-tap-vsock to 0.7.4
    929c64ecf3 test/system: fix borken pasta interface name checks
    c231ba8b23 test/system: fix bridge host.containers.internal test
    b1ad869560 CI: system tests: instrument to allow failure analysis
    5da126dc49 Use uploaded .zip for Windows action
    5f4acdf227 RPM: podman-iptables.conf only on Fedora
    11f56fa42c Bump to v5.2.0-dev
    716874f44e Bump to v5.2.0-rc2
    d72fefc418 Update release notes for v5.2.0-rc2
    5209495865 test/e2e: fix ncat tests
    b6b61a6a49 libpod: add hidden env to set sqlite timeout
    0ecd6fa59f Add support for StopSignal in quadlet .container files
    55b6e4c3e8 podman pod stats: fix race when ctr process exits
    742d29e9d8 Update module github.com/vbauerster/mpb/v8 to v8.7.4
    5e8884ab0d libpod: correctly capture healthcheck output
    5a7199015a Bump bundled krunkit to 0.1.2
    55749af0c7 podman stats: fix race when ctr process exists
    7995e3de53 nc -p considered harmful
    182224defb podman pod stats: fix pod rm race
    e1caf80e81 podman ps: fix racy pod name query
    85f4f89810 system connection remove: use Args function to validate
    f630eebcfa pkg/machine/compression: skip decompress bar for empty file
    7100ead475 nc -p considered harmful
    46f4044893 podman system df: fix fix ErrNoSuchCtr/Volume race
    1413a28409 podman auto-update: fix ErrNoSuchCtr race
    02c094425f Fix name for builder in farm connection
    2f7fd64e98 700-play.bats: use unique pod/container/image/volume names
    380ed3a40d safename: consistent within same test, and, dashes
    6d01ce417d 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
    987d15a378 700-play.bats: eliminate $testYaml
    48aea083c0 700-play.bats: refactor clumsy yamlfile creation
    517c6e6f10 700-play.bats: move _write_test_yaml up near top
    ed71000e6d chore(deps): update dependency setuptools to v71
    3c52ef43f5 Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
    5666100c2e Remove references and checks for --gpus
    1ec3edd3f6 Do not crash on invalid filters
    692d2a5b08 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
    59696341b5 Bump to v5.2.0-dev
    973e865422 Bump to v5.2.0-rc1
    f3e945c86e Keep the volume-driver flag deprecated
    b28027148b System tests: safe container/image/volume/etc names
    d26f0ca90f Implement disable default mounts via command line
    fa75599569 Remove the unused machine volume-driver

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-08-20 13:24:32 +00:00
..
podman podman: Add ptest support for system tests 2022-09-16 11:13:31 -04:00
podman_git.bb podman: update to v5.2.1 2024-08-20 13:24:32 +00:00
README podman: add test instructions for podman system service 2024-01-19 14:29:24 +00:00

rootless podman

Basic configuration:

https://developers.redhat.com/blog/2020/09/25/rootless-containers-with-podman-the-basics#

% echo "user.max_user_namespaces=28633" > /etc/sysctl.d/userns.conf % sysctl -p /etc/sysctl.d/userns.conf

% useradd -c "yocto" yocto % passwd yocto

% su - yocto

% podman pull alpine % podman run alpine cat /etc/os-release % podman images % podman unshare cat /proc/self/uid_map

podman system service

The podman system service command creates a listening service that answers API calls for Podman, it supports systemd socket activation.

Test with docker-compose (v2):

To be noticed, docker could NOT be installed together with podman, so docker-compose should be built as a standalone tool, remove 'docker-plugin' from its PACKAGECONFIG at build time:

PACKAGECONFIG:remove:pn-docker-compose = "docker-plugin"

% sudo systemctl start podman.socket % git clone https://github.com/docker/awesome-compose.git % cd awesome-compose/postgresql-pgadmin; source .env % sudo docker-compose up -d