[CI:DOCS] Add socket_activation.md

[eriksjolund]

Closes #14908

Signed-off-by: Erik Sjölund [email protected]

Does this PR introduce a user-facing change?

None

[vrothberg]

Nice work, @eriksjolund!

@rhatdan @giuseppe @TomSweeneyRedHat PTAL

[eriksjolund]

A side-note:

@rhatdan and I was discussing the possibility to create a related blog post for
https://www.redhat.com/sysadmin/topics/containers

Here is my initial attempt:
https://github.com/eriksjolund/podman-socket-activation/blob/rework_text/blog.md
(For me it would be fine to be a co-author too if you want to modify it)

I also wrote another text
https://github.com/eriksjolund/podman-socket-activation/blob/rework_text/RestrictAddressFamilies.md
(that might be too avant garde for a redhat blog or the podman web page)

[TomSweeneyRedHat]

@eriksjolund you've been rocking the tutorials of late. Can you also please update the README.md with links to the new tutorials and a small description of each?

[eriksjolund]

@eriksjolund you've been rocking the tutorials of late. Can you also please update the README.md with links to the new tutorials and a small description of each?

I added a link to the socket activation tutorial. (I'll wait with adding a link to the performance tutorial because I don't know how long it will take to finish it)

Another thing. I modified this PR to build a local HTTPD container instead of of using ghcr.io/eriksjolund/socket-activate-httpd. The reason is that I wanted to avoid the responsibility to keep that container image up to date to the latest security fixes in HTTPD.

[eriksjolund]

First I thought I should write something about the need to use the Linux operating system to be able to use socket activation.
I had difficulties coming up with a text about that so I just skipped that part.
Maybe it's possible to use Windows or Mac with a Linux VM that use VSOCK?
I'm a little confused about the topic so I skipped writing about that too.

I remove the draft status.

[TomSweeneyRedHat]

LGTM and thanks @eriksjolund
I'd like to have a head nod from @vrothberg

[rhatdan]

/approve
LGTM
@eriksjolund Great work. Did you ever publish the full blogs?
We can wait for @vrothberg to merge.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: eriksjolund, rhatdan

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [rhatdan]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[vrothberg]

/lgtm

[eriksjolund]

@eriksjolund Great work. Did you ever publish the full blogs?

@rhatdan Yesterday I split out the tutorial about using the systemd directive RestrictAddressFamilies
into the new GitHub repository https://github.com/eriksjolund/podman-RestrictAddressFamilies
On Monday or Tuesday I plan to write to tweet about it and also about the new Podman socket activation tutorial

I rewrote the potential RedHat blog a bit. (I removed the SELinux part and instead discussed privileges in more general terms).
Do you think the blog could be published under https://www.redhat.com/sysadmin/topics/containers ?
If so, how should I proceed?