-
Notifications
You must be signed in to change notification settings - Fork 61
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
ac5be9a
commit 6499a52
Showing
1 changed file
with
8 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,37 +1,35 @@ | ||
# podman container image | ||
|
||
This image provides an easy way to try out podman and a base for | ||
nested containerization scenarios where the child container should | ||
run as unprivileged user. | ||
nested and rootless containerization scenarios. | ||
|
||
The alpine-based image contains the following statically linked binaries | ||
The alpine-based image provides the following statically linked binaries | ||
_(without systemd support)_: | ||
* [podman](https://github.com/containers/libpod) | ||
* [runc](https://github.com/opencontainers/runc/) | ||
* [conmon](https://github.com/containers/conmon) | ||
* [fuse-overlayfs](https://github.com/containers/fuse-overlayfs) | ||
* [slirp4netns](https://github.com/rootless-containers/slirp4netns) | ||
* [buildah](https://github.com/containers/buildah) | ||
|
||
* [CNI plugins](https://github.com/containernetworking/plugins): loopback, bridge, host-local, portmap, firewall, tuning | ||
|
||
Containers need to be `--privileged`. | ||
|
||
|
||
As a workaround for docker the entrypoint script changes the owner of | ||
the storage volume mount point (`/podman/.local/share/containers/storage`) | ||
to the unprivileged `podman` user (100000) | ||
before it runs the provided command. | ||
to the unprivileged user `podman` (100000) before it runs the provided command. | ||
|
||
|
||
## Usage example | ||
|
||
Run podman in docker (within the container `docker` links to `podman`): | ||
``` | ||
docker run --privileged mgoltzsche/podman:latest docker run alpine:latest echo hello from podman | ||
``` | ||
|
||
|
||
## Local build, test & run | ||
## Local build & test | ||
|
||
``` | ||
./make.sh build test run | ||
make | ||
make test | ||
``` |