2 ms·

I presume that the bulk of your issues are with container images that start their PID 1s as root. Podman is rootless by default, so this causes problems. What

by nunez 1y ago

I presume that the bulk of your issues are with container images that start their PID 1s as root. Podman is rootless by default, so this causes problems. What you can do if you don't want to use Docker and don't want to maintain these images yourself is have two Podman machines running: one in rootful mode and another in rootless mode. You can, then, use the `--connection` global flag to specify the machine you want your container to run in. Podman can also create those VMs for you if you want it to (I use lima and spin them myself). I recommend using --capabilities to set limits on these containers namespaces out of caution. Podman Desktop also installs a Docker compatibility layer to smooth over these incompatibilities.

xrd 1y ago
This is terrific advice and I would happily upvote a blog post on this! I'll look into exactly this.
bsder 1y ago
Is there a blog post on this somewhere? I'd really love to read more about it beyond just the official documentation.
- nunez 1y ago
  I made a blog post some years ago about how to create your own VMs with Lima: https://blog.carlosnunez.me/post/docker-desktop-alternative-for-mac/ https://blog.carlosnunez.me/post/docker-desktop-alternative-... You can also use this to create a VM for Podman that runs on Fedora, rootful by default: https://github.com/carlosonunez/bash-dotfiles/blob/main/lima-machines/podman.yaml https://github.com/carlosonunez/bash-dotfiles/blob/main/lima... If you go the Lima approach, use `podman system connection add` to add rootful and rootless VMs, then use the `--connection` flag to specify which you want to use. You can alias them to make that easier; for instance, use `alias podman=podman` for rootless stuff (assuming the rootless VM is your default) nad `alias rpodman=podman --connection rootful` for rootful stuff. I'll write a post describing how to set all of that up soon!

by nunez 1y ago

xrd 1y ago

This is terrific advice and I would happily upvote a blog post on this! I'll look into exactly this.

bsder 1y ago

Is there a blog post on this somewhere? I'd really love to read more about it beyond just the official documentation.

nunez 1y ago
I made a blog post some years ago about how to create your own VMs with Lima: https://blog.carlosnunez.me/post/docker-desktop-alternative-for-mac/ https://blog.carlosnunez.me/post/docker-desktop-alternative-... You can also use this to create a VM for Podman that runs on Fedora, rootful by default: https://github.com/carlosonunez/bash-dotfiles/blob/main/lima-machines/podman.yaml https://github.com/carlosonunez/bash-dotfiles/blob/main/lima... If you go the Lima approach, use `podman system connection add` to add rootful and rootless VMs, then use the `--connection` flag to specify which you want to use. You can alias them to make that easier; for instance, use `alias podman=podman` for rootless stuff (assuming the rootless VM is your default) nad `alias rpodman=podman --connection rootful` for rootful stuff. I'll write a post describing how to set all of that up soon!