Разбираем тесты по RH9: Containers
Настраиваем лабораторию по EX200 (Red Hat 9 ) На этот раз тема вопросов: Containers
=====
podman login registgry.redhat.io
podman login registry.redhat.io --getlogin
dnf install container-tools
git clone https://your link here
==
podman search ubi
podman run --name sleepy docker.io/redhat/ubi9 sleep 3600
from another terminal podman ps
podman stop sleepy
podman imahes
podman run -d --name sleepy doscker.io/redhat/ubi9 sleep 3600
podman rm sleepy
podman ps -a
=====
PORT MAPPINGS
podman login registry.access.redhat.com
podman eun -d -p 80:80 registry.access.redhat.com/ubi9/nginx-120
podman run -d -p 8080:80 registry.access.redhat.com/ubi9/nginx-120
podman port -a
=====
PROVIDING PERSISTENT STRG
podman run -d ... -v /hostdir:/containerdir (map Host folder to Container folder to provide persritend strg)
podman unshare cat /proc/self/uid_map To get the UID mapping
podman inspect imagename
podman exec containername grep username /etc/passwd
podman unshare chown nn:nn directoryname To set the container UID as the owner of the directory on the host
podman unshare cat /proc/selg/uid_map To verify mapping
ls -ld /directoryname To check that mapped user is the owner of the directory
=====
STARTING CONTAINER AS A SYSTEMD SERVICE
loginctl enable-linger username (run it from root for specific user that you want to run a container)
loginctl show user linds (check lingering for user linda)
loginctl disable-linger linda
user podman to generate systemd file for that user
Before mkdri ~/.config/systemd/user
and cd ~/config/systemd.yser (cd to this to activate this folder)
podman generate systemd --name myweb --files --new (--NEW IS VERY IMPORTANT HERE!!!!!)
when file is created edit it to be sure that WantedBy line is set to WantedBy=default.target
systemctl --user deamon-reload
systemct --user enable myaap.service
systemctl --user start myapp.service
SYSTEMCTL --USER WORKS ONLY IN CONSOLE OR SSH !!!!!
==
DEMO
sudo useradd linda
sudo passwd linda
sudo loginctl enable-linger linda
ssh linda@localhos
mkdir -p ~/.config/systemd/user
cd ~/.config/systemd/user
podman run -d --name mynginx -p 8081:80 ngninx
podman ps
podman generate systemd --name mynginx --files --new (YOU NEED TO BE FOR THAT IN THE RIGHT DIRECTORY ~/.config/systemd/user !!!!! )
vi container-myngnix.serice
systemctl --user daemon reload
systemctl --user enable container-myngnix.service
systemctl --user status container-myngnix.service
in the end reboot and login WITH ANOTHER user to check is the container started with user you created before
ps faux |less
/linda
and there should be linda processes running containers
Немного маккулатуры что было использовано во время подготовки.