gyptazy.ch is a Fediverse instance that uses the ActivityPub protocol. In other words, users at this host can communicate with people that use software like Mastodon, Pleroma, Friendica, etc. all around the world.

This server runs the snac software and there is no automatic sign-up process.

Admin email
contact@gyptazy.ch
Admin account
@gyptazy@gyptazy.ch

Search results for #podman

Adam »
@maxamillion@fosstodon.org

Stefano Marinelli »
@stefano@mastodon.bsd.cafe

FreeBSD (and Linux), Podman containers and Large Receive Offload.
By @tara

tara.sh/posts/2023/2023-09-07_

Scott Williams 🐧 »
@vwbusguy@mastodon.online

Just in case no one has mentioned it lately, is legitimately amazing.

Berkubernetus »
@fuzzychef@m6n.io

Doug shares a bit of the history of Jails vs. , and talks about porting to .

Photo of Doug Rabison at the podium, with a History slide.

Ric🐧☕ »
@r1w1s1@mastodon.social

@jameshubbard RH wants to admin/developers use but not full compatible always have some minor issues.

david_chisnall »
@david_chisnall@infosec.exchange

on is great, but I miss some deeper integration with things like ZFS delegated administration. Most annoyingly, podman creates all volumes on a single ZFS dataset, which means that it would not be possible to add delegated adminstration (e.g. the ability for a container to snapshot and roll back a volume).

Good news: There's a docker storage plugin that does the right thing and Podman supports it.

Bad news: It depends on systemd socket activation.

I've done a quick-and-dirty port to let it run on FreeBSD without systemd:

github.com/davidchisnall/docke

Longer term, we should support the systemd socket activation protocol. In particular, the model should compose very well with Capsicum, making it fairly trivial to write services that run with least privilege.

Lars Marowsky-Brée 😷 »
@larsmb@mastodon.online

I'm only dealing with because 's all-in-one container deployment requires it (it can't natively talk to ).

And yes, most of this (not docker) is true open source and I could fix it myself ...

But I wish there was a good collective bug/feature bounty program so we could all pool resources, you know?

Sometimes, I don't want to get dragged down yet another rabbit hole.

0 ★ 0 ↺

gyptazy »
@gyptazy@gyptazy.ch

Just created some based images of & . This might become helpful when integrating in your build & test pipelines.

https://gyptazy.ch/misc/riscv-container-images-for-podman-docker/


david_chisnall »
@david_chisnall@infosec.exchange

@kta I’m really looking forward to release engineering providing the base images. VMs work really nicely with on to run FreeBSD containers on macOS. I’ve written some scripts to build the VM:

github.com/davidchisnall/conta

And have some patches to Podman that allows it to create and manage the VM:

github.com/davidchisnall/podma

Kyle Taylor »
@kta@hostux.social

Doug Rabson's (dfr) work building OCI container images of for . He unpacks what an OCI compatible container is. And what making light-weight container images of FreeBSD looks like. OCI containers are a pre-requisite for running natively on FreeBSD. As is a container engine like podman.

freebsdfoundation.org/freebsd-

Bernie »
@codewiz@mstdn.io

slirp4netns is this weird thing for unprivileged network namespaces:

github.com/rootless-containers

It's required by because it runs without root privs.

The in thing also works with classic , but I'd rather use Podman for improved isolation.

Bernie »
@codewiz@mstdn.io

TIL that you can just do this:

dnf install qemu-user-static-riscv slirp4netns podman

podman run --platform=linux/riscv64 -it docker.io/riscv64/ubuntu bash
root@88bb76ac7391:/# uname -a
Linux 88bb76ac7391 6.8.0-0.rc0.20240112git70d201a40823.5.fc40.x86_64 #1 SMP PREEMPT_DYNAMIC Fri Jan 12 16:56:17 UTC 2024 riscv64 riscv64 riscv64 GNU/Linux

Note the weird combo of Fedora Rawhide kerneland riscv64 emulated by qemu 🤨

Steven Rosenberg »
@steven@gts.passthejoe.net

FYI, I've been "sticking" with #toolbx during my current run of #Fedora #Silverblue and NOT using #distrobox, though I am experimenting with #Podman Desktop.

Steven Rosenberg »
@steven@gts.passthejoe.net

waldi »
@waldi@chaos.social

is special casing everything called . And I searched why it behaves differently.

House Panther »
@housepanther@goblackcat.social

I'd like to convert my instance to run on instead of . But before I attempt this, I am going to make certain that I am backed up first. It's not going to happen tonight because I am just too tired. But it's an experiment for another day.

House Panther »
@housepanther@goblackcat.social

rootless containers absolutely rock. The more I am diving into it, the more I like it.

House Panther »
@housepanther@goblackcat.social

Grrrr! is frustrating. I really want to learn it because it's more secure than but I am struggling. I wish there were some good guides out there.

House Panther »
@housepanther@goblackcat.social

is pretty interesting. I'd like to figure out how to get running on it instead of docker.