mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-09-10 01:27:54 +00:00
914eab059d
Discovered by review of https://github.com/containers/buildah/pull/3200 Signed-off-by: Chris Evich <cevich@redhat.com>
68 lines
3.1 KiB
Markdown
68 lines
3.1 KiB
Markdown
|
|
|
|
# podmanimage
|
|
|
|
## Overview
|
|
|
|
This directory contains the Dockerfiles necessary to create the podmanimage container
|
|
images that are housed on quay.io under the Podman account. All repositories where
|
|
the images live are public and can be pulled without credentials. These container images are secured and the
|
|
resulting containers can run safely with privileges within the container.
|
|
|
|
The container images are built using the latest Fedora and then Podman is installed into them.
|
|
The PATH in the container images is set to the default PATH provided by Fedora. Also, the
|
|
ENTRYPOINT and the WORKDIR variables are not set within these container images, as such they
|
|
default to `/`.
|
|
|
|
The container images are:
|
|
|
|
* `quay.io/containers/podman:<version>` and `quay.io/podman/stable:<version>` -
|
|
These images are built when a new Podman version becomes available in
|
|
Fedora. These images are intended to be unchanging and stable, they will
|
|
never be updated by automation once they've been pushed. For build details,
|
|
please [see the configuration file](stable/Dockerfile).
|
|
* `quay.io/containers/podman:latest` and `quay.io/podman/stable:latest` -
|
|
Built daily using the same Dockerfile as above. The Podman version
|
|
will remain the "latest" available in Fedora, however the other image
|
|
contents may vary compared to the version-tagged images.
|
|
* `quay.io/podman/testing:latest` - This image is built daily, using the
|
|
latest version of Podman that was in the Fedora `updates-testing` repository.
|
|
The image is Built with [the testing Dockerfile](testing/Dockerfile).
|
|
* `quay.io/podman/upstream:latest` - This image is built daily using the latest
|
|
code found in this GitHub repository. Due to the image changing frequently,
|
|
it's not guaranteed to be stable or even executable. The image is built with
|
|
[the upstream Dockerfile](upstream/Dockerfile).
|
|
|
|
## Sample Usage
|
|
|
|
|
|
```
|
|
podman pull docker://quay.io/podman/stable:latest
|
|
|
|
podman run --privileged stable podman version
|
|
|
|
# Create a directory on the host to mount the container's
|
|
# /var/lib/container directory to so containers can be
|
|
# run within the container.
|
|
mkdir /var/lib/mycontainer
|
|
|
|
# Run the image detached using the host's network in a container name
|
|
# podmanctr, turn off label and seccomp confinement in the container
|
|
# and then do a little shell hackery to keep the container up and running.
|
|
podman run --detach --name=podmanctr --net=host --security-opt label=disable --security-opt seccomp=unconfined --device /dev/fuse:rw -v /var/lib/mycontainer:/var/lib/containers:Z --privileged stable sh -c 'while true ;do sleep 100000 ; done'
|
|
|
|
podman exec -it podmanctr /bin/sh
|
|
|
|
# Now inside of the container
|
|
|
|
podman pull alpine
|
|
|
|
podman images
|
|
|
|
exit
|
|
```
|
|
|
|
**Note:** If you encounter a `fuse: device not found` error when running the container image, it is likely that
|
|
the fuse kernel module has not been loaded on your host system. Use the command `modprobe fuse` to load the
|
|
module and then run the container image. To enable this automatically at boot time, you can add a configuration
|
|
file to `/etc/modules.load.d`. See `man modules-load.d` for more details.
|