Podman

Podman links

Podman Bglogs

Podman documentation official

Demystifying Containers – Part I: Kernel Space

Demystifying Containers – Part II: Container Runtimes

Demystifying Containers – Part III: Container Images

Demystifying Containers – Part IV: Container Security

Demystifying Containers

OKD community redhat openshift

Exploring additional image stores in Podman

Podman-for-DevOps

Buildah

Buildah official

Build a Container with a Dockerfile

Creating small containers with Buildah

Buildah Blocks: Playing with Buildah Images

Building Container Images with Podman and Buildah

buildah Github

Buildah Tutorial 1

Examples

buildah config --created-by "ipbabble"  $newcontainer
buildah config --author "wgh at redhat.com @ipbabble" --label name=fedora33-bashecho $newcontainer
buildah inspect --type=image fedora-bashecho
skopeo inspect --tls-verify=false docker://localhost:5000/ipbabble/fedora-bashecho:latest
dnf install --installroot $mnt_fedora --releasever 26 nginx --setopt install_weak_deps=false -y

from scratch

#!/bin/bash

set -x

# build a minimal image
newcontainer=$(buildah from scratch)
scratchmnt=$(buildah mount $newcontainer)

# install the packages
yum install --installroot $scratchmnt bash coreutils --releasever 8 --setopt install_weak_deps=false -y
yum clean all -y --installroot $scratchmnt --releasever 8

buildah config --cmd /bin/bash $newcontainer

buildah run $newcontainer mkdir /opt/gobgp
buildah run $newcontainer mkdir /etc/gobgp

buildah copy $newcontainer ./gobgp /opt/gobgp/ 
buildah copy $newcontainer ./gobgpd /opt/gobgp/

buildah config --entrypoint '/opt/gobgp/gobgpd -f /etc/gobgp/gobgp.conf -p > /etc/gobgp/log' $newcontainer

# set some config info
buildah config --label name=centos-gobgpv1 $newcontainer

# commit the image
buildah unmount $newcontainer
buildah commit $newcontainer alexeykr/centos-gobgpv1


[root@osn1 ~]# 

from image alpine

#!/bin/bash

set -x

## build a minimal image and mount
newcontainer=$(buildah from alpine:latest)
scratchmnt=$(buildah mount $newcontainer)

## create directory
buildah run $newcontainer mkdir /opt/gobgp
buildah run $newcontainer mkdir /etc/gobgp
## copy gobgp files
buildah copy $newcontainer ./gobgp /opt/gobgp/ 
buildah copy $newcontainer ./gobgpd /opt/gobgp/
## set config options
buildah config --cmd /bin/bash $newcontainer
buildah config --entrypoint '/opt/gobgp/gobgpd -f /etc/gobgp/gobgp.conf -p > /etc/gobgp/log' $newcontainer

## set some config info
buildah config --label name=alpine-gobgpv1 $newcontainer

# commit the image
buildah unmount $newcontainer
buildah commit $newcontainer alexeykr/alpine-gobgpv1

Podman overview

local image storage for root: /var/lib/containers

podman - directly manage container. some basic container image operation

scopeo - inspect, copy, delete, sign image , manage image repositories. more advanced functionality than podman

buildah - create images

Container Registries

podman tag localhost/nginx quay.io/USeRNAME/nginx
podman push quay.io/USERNAME/nginx

Podman remote client

Podman remote clients for macOS and Windows

GITHUB Podman Remote clients for MacOS and Windows

systemctl enable --now podman.socket
podman system connection add osn1 --identity ~/.ssh/id_rsa ssh://[email protected]/var/run/podman/podman.sock
podman system connection list

export CONTAINER_HOST=ssh://[email protected]:22/var/run/podman/podman.sock
export CONTAINER_SSHKEY=~/.ssh/id_rsa

Podman install version 2

dnf -y module disable container-tools
dnf -y install 'dnf-command(copr)'
dnf -y copr enable rhcontainerbot/container-selinux
curl -L -o /etc/yum.repos.d/devel:kubic:libcontainers:stable.repo https://download.opensuse.org/repositories/devel:/kubic:/libcontainers:/stable/CentOS_8/devel:kubic:libcontainers:stable.repo
sudo dnf -y install podman

Podman API programming

Podman Go bindings

Sneak peek: Podman's new REST API

Reference podman

A First Look At The Podman 2.0 API

curl -s --unix-socket /run/podman/podman.sock http://d/v1.0.0/libpod/info | jq

Commands

podman pull nginx
podman images
podman rmi ID
podman run --rm debian /bin/echo “Hello, New Stack.”
podman ps -a
podman stop ID
podman rm ID
podman run -dt --name nginx nginx
podman inspect -f “{{.NetworkSettings.IPAddress}}” nginx
podman run -it --rm nginx /bin/sh
podman top <container_id>

podman search --filter=is-automated=true centos
docker history <imageID>
docker save -o myapache.tar myapache
docker load -i myapache.tar

podman run -d --ip=10.88.0.44 registry.access.redhat.com/rhel7/rsyslog
podman inspect gitlabv1 | jq '.[0].NetworkSettings.IPAddress'

Create healthcheck

Container Healthcheck with Podman

Monitoring container vitality and availability with Podman

# add to service or podman run ...
--healthcheck-interval 5s --healthcheck-timeout 1s --healthcheck-command 'curl http://localhost:8080 || exit 1'

Create systemd service

podman generate systemd --files --new --name --restart-policy=always jenkins
podman generate systemd --files --new --name gitlabv1
podman inspect gitlabv1 | jq '.[0]["State"]'

podman generate systemd man

Running containers with Podman and shareable systemd services

Create pod

Deploy a Pod on CentOS with Podman

podman pod create
podman pod create --name new_stack
podman pod list
podman ps -a --pod
# add container to pod
podman run -dt --pod new_stack ubuntu top
podman pod ps
# create container in pod
podman run -dt --pod new:web_server -p 8080:80 nginx

podman stop ID
podman start ID

Inspect remote images

skopeo inspect docker://docker.io/monitoringartist/grafana-xxl

Networking

Configuring container networking with Podman

Networking

Exposing Podman containers fully on the network

podman network create
# если на маке то нужно sudo
sudo podman network ls
podman network rm
podman port --all

Podman and Systemd services

Running containers with Podman and shareable systemd services

Kubernetes

How to Install a Kubernetes Cluster on Red Hat CentOS 8 using docker