Skip to content
  • Hjem
  • Seneste
  • Etiketter
  • Populære
  • Verden
  • Bruger
  • Grupper
Temaer
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Kollaps
FARVEL BIG TECH
  1. Forside
  2. Ikke-kategoriseret
  3. Running Podman in production for years now, and I don't miss the Docker daemon one bit.

Running Podman in production for years now, and I don't miss the Docker daemon one bit.

Planlagt Fastgjort Låst Flyttet Ikke-kategoriseret
podmanlinuxdevopssystemdhomelab
35 Indlæg 21 Posters 1 Visninger
  • Ældste til nyeste
  • Nyeste til ældste
  • Most Votes
Svar
  • Svar som emne
Login for at svare
Denne tråd er blevet slettet. Kun brugere med emne behandlings privilegier kan se den.
  • mmu_man@m.g3l.orgM mmu_man@m.g3l.org

    @Larvitz been wondering about switching to either podman or libvirt for the plain LXC things I have on a server, because some other admins are not used to it and want GUI tools, but I suppose that means migrating… ?

    larvitz@burningboard.netL This user is from outside of this forum
    larvitz@burningboard.netL This user is from outside of this forum
    larvitz@burningboard.net
    wrote sidst redigeret af
    #4

    @mmu_man For GUIs, there's Podman Desktop (https://podman-desktop.io) and also the web-based Cockpit Client for Podman (https://github.com/cockpit-project/cockpit-podman)

    mmu_man@m.g3l.orgM 1 Reply Last reply
    0
    • larvitz@burningboard.netL larvitz@burningboard.net

      @mmu_man For GUIs, there's Podman Desktop (https://podman-desktop.io) and also the web-based Cockpit Client for Podman (https://github.com/cockpit-project/cockpit-podman)

      mmu_man@m.g3l.orgM This user is from outside of this forum
      mmu_man@m.g3l.orgM This user is from outside of this forum
      mmu_man@m.g3l.org
      wrote sidst redigeret af
      #5

      @Larvitz yeah but it won't keep containers as is I guess, so I won't be able to keep using lxc commands directly…

      larvitz@burningboard.netL 1 Reply Last reply
      0
      • mmu_man@m.g3l.orgM mmu_man@m.g3l.org

        @Larvitz yeah but it won't keep containers as is I guess, so I won't be able to keep using lxc commands directly…

        larvitz@burningboard.netL This user is from outside of this forum
        larvitz@burningboard.netL This user is from outside of this forum
        larvitz@burningboard.net
        wrote sidst redigeret af
        #6

        @mmu_man Yeah for sure. LXC and Podman are different technologies.

        1 Reply Last reply
        0
        • larvitz@burningboard.netL larvitz@burningboard.net

          Running Podman in production for years now, and I don't miss the Docker daemon one bit.

          I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

          I cover:
          - Real secrets management
          - Auto-updates via systemd timers
          - The Docker compatibility layer

          This is the guide I wish I had when making the switch.

          Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

          #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

          shom@gts.shom.devS This user is from outside of this forum
          shom@gts.shom.devS This user is from outside of this forum
          shom@gts.shom.dev
          wrote sidst redigeret af
          #7

          @Larvitz this is awesome, thanks for putting it together. I've been using podman for a few years and got started after generating the unit files from running containers. I wish I had a guide like this for getting started.
          Quick question if you don't mind; I have a separate container running user and put the unit files in ~/.config/systemd/user/ instead. You suggest ~/.config/containers/systemd/ which seems to make sense as a path but I was hoping to understand the difference better. Could you please point me to a resource?

          larvitz@burningboard.netL 1 Reply Last reply
          0
          • shom@gts.shom.devS shom@gts.shom.dev

            @Larvitz this is awesome, thanks for putting it together. I've been using podman for a few years and got started after generating the unit files from running containers. I wish I had a guide like this for getting started.
            Quick question if you don't mind; I have a separate container running user and put the unit files in ~/.config/systemd/user/ instead. You suggest ~/.config/containers/systemd/ which seems to make sense as a path but I was hoping to understand the difference better. Could you please point me to a resource?

            larvitz@burningboard.netL This user is from outside of this forum
            larvitz@burningboard.netL This user is from outside of this forum
            larvitz@burningboard.net
            wrote sidst redigeret af
            #8

            @shom

            ~/.config/systemd/user/ is for systmd units (podman generate systemd). That was the old way to do it.

            ~/.config/containers/systemd/ is for Quadlet files, the modern way to describe containers declaratively:

            https://docs.podman.io/en/latest/markdown/podman-systemd.unit.5.html

            Quadlets files are similar to Systemd units and describe a container with all it's attributes.

            shom@gts.shom.devS 1 Reply Last reply
            0
            • mmu_man@m.g3l.orgM mmu_man@m.g3l.org

              @Larvitz been wondering about switching to either podman or libvirt for the plain LXC things I have on a server, because some other admins are not used to it and want GUI tools, but I suppose that means migrating… ?

              oldsysops@social.dk-libre.frO This user is from outside of this forum
              oldsysops@social.dk-libre.frO This user is from outside of this forum
              oldsysops@social.dk-libre.fr
              wrote sidst redigeret af
              #9
              @mmu_man@m.g3l.org #proxmox have a gui and can spin off lxc container no ?
              mmu_man@m.g3l.orgM 1 Reply Last reply
              0
              • larvitz@burningboard.netL larvitz@burningboard.net

                @shom

                ~/.config/systemd/user/ is for systmd units (podman generate systemd). That was the old way to do it.

                ~/.config/containers/systemd/ is for Quadlet files, the modern way to describe containers declaratively:

                https://docs.podman.io/en/latest/markdown/podman-systemd.unit.5.html

                Quadlets files are similar to Systemd units and describe a container with all it's attributes.

                shom@gts.shom.devS This user is from outside of this forum
                shom@gts.shom.devS This user is from outside of this forum
                shom@gts.shom.dev
                wrote sidst redigeret af
                #10

                @Larvitz ahhhhh perfect, this made it click finally. I was just generically describing how to run an application (happened to be a container) and Quadlets use the unit file approach but describes the container itself (which I read in the unit file but didn't make the connection). Thanks so much!!

                1 Reply Last reply
                0
                • oldsysops@social.dk-libre.frO oldsysops@social.dk-libre.fr
                  @mmu_man@m.g3l.org #proxmox have a gui and can spin off lxc container no ?
                  mmu_man@m.g3l.orgM This user is from outside of this forum
                  mmu_man@m.g3l.orgM This user is from outside of this forum
                  mmu_man@m.g3l.org
                  wrote sidst redigeret af
                  #11

                  @oldsysops not sure, I'll have to check that

                  1 Reply Last reply
                  0
                  • larvitz@burningboard.netL larvitz@burningboard.net

                    Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                    I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                    I cover:
                    - Real secrets management
                    - Auto-updates via systemd timers
                    - The Docker compatibility layer

                    This is the guide I wish I had when making the switch.

                    Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                    #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                    andrew@mastodon.furrow.meA This user is from outside of this forum
                    andrew@mastodon.furrow.meA This user is from outside of this forum
                    andrew@mastodon.furrow.me
                    wrote sidst redigeret af
                    #12

                    @Larvitz another person of culture I see…/me tips hat

                    I’ve been operating with a mixture of quadlets and manual podman-compose containers for quite some time. I’ve found compatibility issues with some projects, but I decided those do not justify switching to docker. There’s also an annoying race condition with CNI coming up before networkmanager, but manual fix is easy enough for those times.

                    Great blog post! Thanks

                    larvitz@burningboard.netL 1 Reply Last reply
                    0
                    • andrew@mastodon.furrow.meA andrew@mastodon.furrow.me

                      @Larvitz another person of culture I see…/me tips hat

                      I’ve been operating with a mixture of quadlets and manual podman-compose containers for quite some time. I’ve found compatibility issues with some projects, but I decided those do not justify switching to docker. There’s also an annoying race condition with CNI coming up before networkmanager, but manual fix is easy enough for those times.

                      Great blog post! Thanks

                      larvitz@burningboard.netL This user is from outside of this forum
                      larvitz@burningboard.netL This user is from outside of this forum
                      larvitz@burningboard.net
                      wrote sidst redigeret af
                      #13

                      @andrew That blog article took me the longest of them all. A first draft had been lingering in my blog's git repo since November last year, and I went through numerous rewrites of various parts until I found them good enough. Today, I added the final paragraph about Ansible and decided to publish it before I end up waiting another 6 months 😂

                      1 Reply Last reply
                      0
                      • larvitz@burningboard.netL larvitz@burningboard.net

                        Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                        I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                        I cover:
                        - Real secrets management
                        - Auto-updates via systemd timers
                        - The Docker compatibility layer

                        This is the guide I wish I had when making the switch.

                        Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                        #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                        db_geek@norden.socialD This user is from outside of this forum
                        db_geek@norden.socialD This user is from outside of this forum
                        db_geek@norden.social
                        wrote sidst redigeret af
                        #14

                        @Larvitz Maybe you could add the hint, that automatic starting of rootless quadlets needs an user, where lingering is enabled.
                        It can be found at the examples.
                        https://docs.podman.io/en/latest/markdown/podman-system-service.1.html
                        ```
                        loginctl enable-linger <USER>
                        ```

                        1 Reply Last reply
                        0
                        • larvitz@burningboard.netL larvitz@burningboard.net

                          Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                          I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                          I cover:
                          - Real secrets management
                          - Auto-updates via systemd timers
                          - The Docker compatibility layer

                          This is the guide I wish I had when making the switch.

                          Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                          #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                          woodsb02@fosstodon.orgW This user is from outside of this forum
                          woodsb02@fosstodon.orgW This user is from outside of this forum
                          woodsb02@fosstodon.org
                          wrote sidst redigeret af
                          #15

                          @Larvitz I love podman too, but recently I’ve been wondering about running rootless containers that aren’t tied to a specific host user. I’ve posted this as a discussion topic here - thoughts? https://github.com/containers/podman/discussions/28445

                          1 Reply Last reply
                          0
                          • larvitz@burningboard.netL larvitz@burningboard.net

                            Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                            I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                            I cover:
                            - Real secrets management
                            - Auto-updates via systemd timers
                            - The Docker compatibility layer

                            This is the guide I wish I had when making the switch.

                            Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                            #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                            patlikestechnology@infosec.exchangeP This user is from outside of this forum
                            patlikestechnology@infosec.exchangeP This user is from outside of this forum
                            patlikestechnology@infosec.exchange
                            wrote sidst redigeret af
                            #16

                            @Larvitz Thanks for the article.
                            I never went beyond podman compose because I couldn't really find beginner-friendly examples on how to use Quadlets in production, so this is a great reference on how to get started.

                            1 Reply Last reply
                            0
                            • larvitz@burningboard.netL larvitz@burningboard.net

                              Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                              I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                              I cover:
                              - Real secrets management
                              - Auto-updates via systemd timers
                              - The Docker compatibility layer

                              This is the guide I wish I had when making the switch.

                              Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                              #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                              ikket@mementomori.socialI This user is from outside of this forum
                              ikket@mementomori.socialI This user is from outside of this forum
                              ikket@mementomori.social
                              wrote sidst redigeret af
                              #17

                              @Larvitz very good starter pack for podman! I'd say all the normal operations described well and then some. Only thing more I use is exec for various debugging things or fixing something in storage. But if this is for docker users, there is no difference.

                              1 Reply Last reply
                              0
                              • larvitz@burningboard.netL larvitz@burningboard.net

                                Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                                I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                                I cover:
                                - Real secrets management
                                - Auto-updates via systemd timers
                                - The Docker compatibility layer

                                This is the guide I wish I had when making the switch.

                                Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                                #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                                rhempel@cosocial.caR This user is from outside of this forum
                                rhempel@cosocial.caR This user is from outside of this forum
                                rhempel@cosocial.ca
                                wrote sidst redigeret af
                                #18

                                @Larvitz Now I know what I'll be reading tomorrow!

                                I made the switch about two years ago and use Podman for embedded systems development. It's much easier than spinning up a VM and combined with VSCodium makes a nice IDE that allows remote debugging.

                                1 Reply Last reply
                                0
                                • larvitz@burningboard.netL larvitz@burningboard.net

                                  Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                                  I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                                  I cover:
                                  - Real secrets management
                                  - Auto-updates via systemd timers
                                  - The Docker compatibility layer

                                  This is the guide I wish I had when making the switch.

                                  Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                                  #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                                  art_codesmith@toot.cafeA This user is from outside of this forum
                                  art_codesmith@toot.cafeA This user is from outside of this forum
                                  art_codesmith@toot.cafe
                                  wrote sidst redigeret af
                                  #19

                                  @Larvitz Interesting.
                                  For me, the poor Compose support is one of the reasons I'm still sticking with Docker for development. Although, I think, the advantage of Compose files is simplicity (not having to commit to the whole systemd units system).

                                  1 Reply Last reply
                                  0
                                  • art_codesmith@toot.cafeA This user is from outside of this forum
                                    art_codesmith@toot.cafeA This user is from outside of this forum
                                    art_codesmith@toot.cafe
                                    wrote sidst redigeret af
                                    #20

                                    @Larvitz I might be wrong but, don't you lose basically all advantages of Podman by doing so? Having to give up daemonless and rootless.

                                    1 Reply Last reply
                                    0
                                    • larvitz@burningboard.netL larvitz@burningboard.net

                                      Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                                      I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                                      I cover:
                                      - Real secrets management
                                      - Auto-updates via systemd timers
                                      - The Docker compatibility layer

                                      This is the guide I wish I had when making the switch.

                                      Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                                      #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                                      hanscees@ieji.deH This user is from outside of this forum
                                      hanscees@ieji.deH This user is from outside of this forum
                                      hanscees@ieji.de
                                      wrote sidst redigeret af
                                      #21

                                      @Larvitz I have been planning tot migrate tot podman but life has many priorities
                                      Will read

                                      1 Reply Last reply
                                      0
                                      • art_codesmith@toot.cafeA This user is from outside of this forum
                                        art_codesmith@toot.cafeA This user is from outside of this forum
                                        art_codesmith@toot.cafe
                                        wrote sidst redigeret af
                                        #22

                                        @Larvitz Thank you. I might have to dig a bit further into this.

                                        1 Reply Last reply
                                        0
                                        • larvitz@burningboard.netL larvitz@burningboard.net

                                          Running Podman in production for years now, and I don't miss the Docker daemon one bit.

                                          I just published a deep dive on managing OCI containers the Unix way: daemonless, rootless, and natively integrated with systemd via Quadlets.

                                          I cover:
                                          - Real secrets management
                                          - Auto-updates via systemd timers
                                          - The Docker compatibility layer

                                          This is the guide I wish I had when making the switch.

                                          Read it here: https://blog.hofstede.it/podman-in-production-quadlets-secrets-auto-updates-and-docker-compatibility/

                                          #Podman #Linux #DevOps #Systemd #Homelab #Sysadmin #Containers

                                          slash909uk@mastodon.me.ukS This user is from outside of this forum
                                          slash909uk@mastodon.me.ukS This user is from outside of this forum
                                          slash909uk@mastodon.me.uk
                                          wrote sidst redigeret af
                                          #23

                                          @Larvitz nice!

                                          I am halfway with podman; still have compose files launched from systemd units that I write myself - they are all basically identical except the home directory setting 🙂

                                          I deliberately use compose start only, not run. I do not want restarts to be messing about pulling new images when I dont expect it!

                                          Is there an equivalent to quadlets for alternative init tools? I would not want to lock myself into systemd right now 😁 seriousky looking at BSD.

                                          larvitz@burningboard.netL 1 Reply Last reply
                                          0
                                          Svar
                                          • Svar som emne
                                          Login for at svare
                                          • Ældste til nyeste
                                          • Nyeste til ældste
                                          • Most Votes


                                          • Log ind

                                          • Har du ikke en konto? Tilmeld

                                          • Login or register to search.
                                          Powered by NodeBB Contributors
                                          Graciously hosted by data.coop
                                          • First post
                                            Last post
                                          0
                                          • Hjem
                                          • Seneste
                                          • Etiketter
                                          • Populære
                                          • Verden
                                          • Bruger
                                          • Grupper