mirror of
https://github.com/podman-container-tools/podman.git
synced 2026-10-13 17:37:42 +00:00
fc6dcd12b3
We added the concept of image volumes in 2.2.0, to support inspecting an image from within a container. However, this is a strictly read-only mount, with no modification allowed. By contrast, the new `image` volume driver creates a c/storage container as its underlying storage, so we have a read/write layer. This, in and of itself, is not especially interesting, but what it will enable in the future is. If we add a new command to allow these image volumes to be committed, we can now distribute volumes - and changes to them - via a standard OCI image registry (which is rather new and quite exciting). Future work in this area: - Add support for `podman volume push` (commit volume changes and push resulting image to OCI registry). - Add support for `podman volume pull` (currently, we require that the image a volume is created from be already pulled; it would be simpler if we had a dedicated command that did the pull and made a volume from it) - Add support for scratch images (make an empty image on demand to use as the base of the volume) - Add UOR support to `podman volume push` and `podman volume pull` to enable both with non-image volume drivers Signed-off-by: Matthew Heon <matthew.heon@pm.me>
79 lines
2.2 KiB
Text
79 lines
2.2 KiB
Text
[containers]
|
|
|
|
# A list of ulimits to be set in containers by default, specified as
|
|
# "<ulimit name>=<soft limit>:<hard limit>", for example:
|
|
# "nofile=1024:2048"
|
|
# See setrlimit(2) for a list of resource names.
|
|
# Any limit not specified here will be inherited from the process launching the
|
|
# container engine.
|
|
# Ulimits has limits for non privileged container engines.
|
|
#
|
|
default_ulimits = [
|
|
"nofile=500:500",
|
|
]
|
|
|
|
# Environment variable list for the conmon process; used for passing necessary
|
|
# environment variables to conmon or the runtime.
|
|
#
|
|
env = [
|
|
"PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
|
|
"foo=bar",
|
|
]
|
|
|
|
# container engines use container separation using MAC(SELinux) labeling.
|
|
# Flag is ignored on label disabled systems.
|
|
#
|
|
label = true
|
|
|
|
# Size of /dev/shm. Specified as <number><unit>.
|
|
# Unit is optional, values:
|
|
# b (bytes), k (kilobytes), m (megabytes), or g (gigabytes).
|
|
# If the unit is omitted, the system uses bytes.
|
|
#
|
|
shm_size = "201k"
|
|
|
|
# List of devices. Specified as
|
|
# "<device-on-host>:<device-on-container>:<permissions>", for example:
|
|
# "/dev/sdc:/dev/xvdc:rwm".
|
|
# If it is empty or commented out, only the default devices will be used
|
|
#
|
|
devices = [
|
|
"/dev/zero:/dev/notone:rwm",
|
|
]
|
|
|
|
default_sysctls = [
|
|
"net.ipv4.ping_group_range=0 1000",
|
|
]
|
|
|
|
dns_searches=[ "foobar.com", ]
|
|
dns_servers=[ "1.2.3.4", ]
|
|
dns_options=[ "debug", ]
|
|
|
|
tz = "Pacific/Honolulu"
|
|
|
|
umask = "0002"
|
|
|
|
annotations=["run.oci.keep_original_groups=1",]
|
|
|
|
no_hosts=true
|
|
[engine]
|
|
|
|
network_cmd_options=["allow_host_loopback=true"]
|
|
service_timeout=1234
|
|
|
|
volume_plugin_timeout = 15
|
|
|
|
# We need to ensure each test runs on a separate plugin instance...
|
|
# For now, let's just make a bunch of plugin paths and have each test use one.
|
|
[engine.volume_plugins]
|
|
testvol0 = "/run/docker/plugins/testvol0.sock"
|
|
testvol1 = "/run/docker/plugins/testvol1.sock"
|
|
testvol2 = "/run/docker/plugins/testvol2.sock"
|
|
testvol3 = "/run/docker/plugins/testvol3.sock"
|
|
testvol4 = "/run/docker/plugins/testvol4.sock"
|
|
testvol5 = "/run/docker/plugins/testvol5.sock"
|
|
testvol6 = "/run/docker/plugins/testvol6.sock"
|
|
testvol7 = "/run/docker/plugins/testvol7.sock"
|
|
testvol8 = "/run/docker/plugins/testvol8.sock"
|
|
testvol9 = "/run/docker/plugins/testvol9.sock"
|
|
image = "/run/docker/plugins/image.sock"
|