Podman 4.4

https://github.com/containers/podman/releases/tag/v4.4.0

by harporoeder • 3 years ago

89 41 3 years ago

wooptoo• 3 years ago

Did they sort out rootless networking? I've tried podman twice but simply cannot get networking to work properly when using a docker-compose file.

2OEH8eoCRo02• 3 years ago

What was wrong with it?

misnome• 3 years ago

It is very difficult getting containers that aren’t in a pod together to be able to talk to each other, with rootless pods, and without just host-binding everything. None of the normal hostname conveniences are in place, and if it’s possible to do it isn’t default and probably needed much more underlying knowledge than I had when I tried.

limaho• 3 years ago

I haven’t had issues with rootless networking but I run pretty simple apps. I gave up on podman-compose though and run individual commands to create podman objects. Once rootless containers are in the same pod you can access other containers in the same pod over localhost

kirbyfan64sos• 3 years ago

Podman has a Docker-compatible service API, so you can use it via docker-compose.

itsmartapuntocm• 3 years ago

I embraced pods and now I don’t think I would want to go back to docker without them.

Once I get everything built the way I want I dump the config to a yaml with “podman generate kube” for future reference.

It’s also nice being able to use systemd service files to start/stop everything, and podman has a command to generate those too.

galleywest200• 3 years ago

I too have issues with this, but mainly trying to run protected ports (port 53 for DNS with PiHole) as rootless Podman -- it just did not work. Went back to docker and have not had an issue since.

candiddevmike2• 3 years ago

Just don't use rootless. You can still do user namespace containers (the real benefit to rootless, IMO) as a root user. I predict we will find all sorts of fun, niche security bugs that were made to get rootless containers working, especially networking--linux really doesn't like unprivileged changes to the networking stack.

If you already have sudo/root access for your user, rootless is just going to cause more problems.

mbreese2• 3 years ago

I think that’s by design. Non-root users aren’t supposed to be able to listen on protected ports. If you need to run PiHole as a non-root user, you could start the container rootless to listen on 5353/udp (arbitrary). Then (as root), add a firewall rule to redirect traffic from 5353/udp -> 53/udp. That probably the only way to make this work while still running the container as a non-root user.

PeterWhittaker• 3 years ago

Start the container via systemd and ensure it has CAP_NET_BIND?

seized• 3 years ago

Podman 4.0 brought a new network stack for rootless called Netavark. Works nicely for me.

aaravchen• 3 years ago

Since docker-compose is designed to exclusively work with rootful containers (basically the only thing docker supports), it's not a surprise you're having problems trying to run it rootless.

Podman added an optional rootful daemon a few releases ago that you can run in place of/next to the docker daemon that (theoretically) supports all the same docker network functionality specifcally so docker and docker compose commands can be run unchanged on podman.

flemhans• 3 years ago

Nice, but seems sort of as complicated as I remember Systemd itself to be.

2OEH8eoCRo02• 3 years ago

This has been out for weeks. Went to check my version and I'm on 4.4.1 (Fedora).

Wronnay• 3 years ago

I hope more open source projects support it.

Most repos I check out still have only docker specific commands…

Even though most things are similar, the differences in e.g networking (for example host.docker.internal vs host.containers.internal) create lots of Issues for me

candiddevmike2• 3 years ago

You may be able to symlink podman to /usr/bin/docker and things should "Just Work"

mikercampbell• 3 years ago

That was the smartest decision they made other than the product itself

shadycuz• 3 years ago

I got my simple docker files working with podman but my more advanced ones didn't. This was about 8 months ago. After running podman for about 2-3 weeks on my dev machine, I went back to docker.

WirelessGigabit• 3 years ago

How do we encourage other repos like Ubuntu to update to this version? I'd love to have some Ubuntu like distro that has faster / rolling updates for WSL and some VMs. Even the next version of Ubuntu is still stuck on version 3.4...

yrro5• 3 years ago

It's in universe, so I guess wait for the newer package to be pulled from Debian (unstable currently has 4.3.4)?

Or maybe you can request it via the process outlined at https://wiki.ubuntu.com/SyncRequestProcess?

dima552• 3 years ago

By contributing the change you want to see to Debian. Ubuntu is almost entirely a straight rebuild of Debian.

mindwok• 3 years ago

That isn’t the issue. Debian experimental already has 4.4.0, but it won’t make it into Debian unstable and thus Ubuntu for a while. The issue is how frequently Debian and Ubuntu release.

OJFord• 3 years ago

A not what you're asking, but answer you're actually looking for response might be don't use Ubuntu, use a 'rolling release' distro such as Arch? (Or coming from Ubuntu perhaps the derivative Manjaro.)

antod• 3 years ago

It's in Ubuntu's Universe repository. That means it's usually just the upstream Debian package or one maintained by the community rather than Ubuntu itself.

Ubuntu's podman 3.4 was pulled from Debian Unstable at some point (Debian Stable is still on 3.0?). It looks like Debian Testing has 4.3, so they're probably waiting to just use that from Debian Stable in Ubuntu Lunar rather than the community maintaining their own version.

https://code.launchpad.net/ubuntu/+source/libpod

AtlasBarfed2• 3 years ago

Ok, I really want to use podman, but the last time I built an image and tried to run it, I ran into a brick wall.

I think I used something called buildah to package something, and it had some parameter for a name, but then trying to run it using podman, podman didn't seem to have any way to reference the container image that I THINK buildah created. I think there was also something called spokeo but I don't recall what it did, or it did not help this workflow.

The tutorials all seemed to assume pulling images from the internet.

Anyone have a good podman tutorial that really goes from install podman -> make container -> run container on a Linux box?

sagarm• 3 years ago

This works for me on Ubuntu 22.10:

  $ sudo apt install podman buildah
  $ mkdir empty && cd empty
  $ cat > Containerfile <<EOF
  FROM alpine:3.14
  RUN echo 'echo hello podman!' > /root/hello.sh
  ENTRYPOINT ["/bin/sh", "/root/hello.sh"]
  EOF
  $ buildah build -f Containerfile -t hello-podman .
  $ podman run -it --rm  localhost/hello-podman:latest
  hello podman!

edit: stryan has more minimalist instructions above.

AtlasBarfed2• 3 years ago

AH, so it must be the localhost/hello-podman:latest was the axle-wrap.

I will now bitch about how everything needs to be converted to some obscure url or pseudo-url when a file path would do. This has bitten me on:

- JSP tag libraries

- XML xsd references (which back in the Spring XML namespace-go-nuts era was really annoying)

- file:///fully/qualified/path

There, I have bitched.

stryan• 3 years ago

Were you building from a Dockerfile or Containerfile? If so, you don't need to use buildah you can just use podman build, same as you would docker. So to build an image from a Dockerfile/Containerfile in the current directory just run

podman build -t what_the_image_to_be_tagged .

Then to reference the container by name when you run it, you gotta specify that at runtime:

podman run --name foo the_image_you_just_tagged

hitori2• 3 years ago

There are no builds for Ubuntu 22.04 LTS on arm64, anyone can tell me how to run it on there?

The version in official Ubuntu apt repo is still 3.x ..

edpenz• 3 years ago

Best solution I've found is installing the v4.3 .debs from Debian bookworm. Only caveat is you need to do some of the dependencies manually as well.

hitori2• 3 years ago

thank you

sphix0r• 3 years ago

What are the benefits of using podman over docker desktop? I've just got my new M1 macbook and are tempting to try docker desktop alternatives..

cassianoleal• 3 years ago

I don't know how podman machine compares, but I've found colima [0] to be a much better experience to Docker Desktop on Apple Silicon Macs.

[0] https://github.com/abiosoft/colima

Podman 4.4

Related Stories