mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-08-14 04:39:33 +00:00
d7e248dcff
This is much better for the systemd case becase we pass the journal socket fds directly to the container. This means less copying of the logs, but it also means the journal will correctly get the peer process id when it tries to extract things like the name of what is logging something. With this we correctly name the logging process rather than claim everything comes from conmon. Signed-off-by: Alexander Larsson <alexl@redhat.com>
28 lines
1.2 KiB
Text
28 lines
1.2 KiB
Text
## assert-podman-final-args imagename
|
|
## assert-podman-args "--name=systemd-%N"
|
|
## assert-podman-args "--cidfile=%t/%N.cid"
|
|
## assert-podman-args "--rm"
|
|
## assert-podman-args "--replace"
|
|
## assert-podman-args "-d"
|
|
## assert-podman-args "--log-driver" "passthrough"
|
|
## assert-podman-args "--pull=never"
|
|
## assert-podman-args "--init"
|
|
## assert-podman-args "--runtime" "/usr/bin/crun"
|
|
## assert-podman-args "--cgroups=split"
|
|
## assert-podman-args "--sdnotify=conmon"
|
|
## assert-podman-args "--security-opt=no-new-privileges"
|
|
## assert-podman-args "--cap-drop=all"
|
|
## assert-podman-args "--read-only"
|
|
## !assert-podman-args "--read-only-tmpfs=false"
|
|
## assert-key-is "Unit" "RequiresMountsFor" "%t/containers"
|
|
## assert-key-is "Service" "KillMode" "mixed"
|
|
## assert-key-is "Service" "Delegate" "yes"
|
|
## assert-key-is "Service" "Type" "notify"
|
|
## assert-key-is "Service" "NotifyAccess" "all"
|
|
## assert-key-is "Service" "SyslogIdentifier" "%N"
|
|
## assert-key-is "Service" "ExecStartPre" "-rm -f %t/%N.cid"
|
|
## assert-key-is "Service" "ExecStopPost" "-/usr/bin/podman rm -f -i --cidfile=%t/%N.cid" "-rm -f %t/%N.cid"
|
|
## assert-key-is "Service" "Environment" "PODMAN_SYSTEMD_UNIT=%n"
|
|
|
|
[Container]
|
|
Image=imagename
|