Skip to content

Commit

Permalink
Update readme
Browse files Browse the repository at this point in the history
  • Loading branch information
mgoltzsche committed Aug 26, 2020
1 parent ac5be9a commit 6499a52
Showing 1 changed file with 8 additions and 10 deletions.
18 changes: 8 additions & 10 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,37 +1,35 @@
# podman container image

This image provides an easy way to try out podman and a base for
nested containerization scenarios where the child container should
run as unprivileged user.
nested and rootless containerization scenarios.

The alpine-based image contains the following statically linked binaries
The alpine-based image provides the following statically linked binaries
_(without systemd support)_:
* [podman](https://github.com/containers/libpod)
* [runc](https://github.com/opencontainers/runc/)
* [conmon](https://github.com/containers/conmon)
* [fuse-overlayfs](https://github.com/containers/fuse-overlayfs)
* [slirp4netns](https://github.com/rootless-containers/slirp4netns)
* [buildah](https://github.com/containers/buildah)

* [CNI plugins](https://github.com/containernetworking/plugins): loopback, bridge, host-local, portmap, firewall, tuning

Containers need to be `--privileged`.


As a workaround for docker the entrypoint script changes the owner of
the storage volume mount point (`/podman/.local/share/containers/storage`)
to the unprivileged `podman` user (100000)
before it runs the provided command.
to the unprivileged user `podman` (100000) before it runs the provided command.


## Usage example

Run podman in docker (within the container `docker` links to `podman`):
```
docker run --privileged mgoltzsche/podman:latest docker run alpine:latest echo hello from podman
```


## Local build, test & run
## Local build & test

```
./make.sh build test run
make
make test
```

0 comments on commit 6499a52

Please sign in to comment.