Podman (Rootless) Installation und Konfiguration

sudo pacman -S podman
1) crun

# für rootless konfiguration sinnfoll
sudo pacman -S fuse-overlayfs slirp4netns

Podman Konfiguration anlegen und bearbeiten

mkdir -p ~/.config/containers
nvim ~/.config/containers/containers.conf
[engine]
cgroup_manager = "cgroupfs"
:wq

Podman Systemdienst Aktivieren und Starten:

systemctl --user enable podman.socket
systemctl --user start podman.socket
systemctl --user status podman.socket

Podman testen:

podman run hello-world

Container Hart Stoppen

podman kill -s KILL <Containername>

sudo usermod -aG systemd-journal,kvm,input $USER
newgrp input groups $USER

mkdir -p ~/.config/containers
mkdir -p ~/.local/share/containers
chmod 700 ~/.local/share/containers
chmod 700 ~/.local/share/containers/storage
chown -R $USER:wheel ~/.local/share/containers

Pfad: ~/.config/containers/storage.conf

[storage]
driver = "overlay"
graphroot = "/home/<BENUTZERNAME>/.local/share/containers/storage"
runroot = "/run/user/1000/containers"

[storage.options]
mount_program = "/usr/bin/fuse-overlayfs"

[storage.options.overlay]
mountopt = "nodev,fsync=0"
ignore_chown_errors = "true"

Pfad: ~/.config/containers/containers.conf

[engine]
cgroup_manager = "cgroupfs"
events_logger = "file"
runtime = "crun"

[engine.runtimes]
crun = [
    "/usr/bin/crun"
]

[network]
network_backend = "netavark"
default_network = "podman"

[storage]
driver = "overlay"
graphroot = "/home/sergi/.local/share/containers/storage"
runroot = "/run/user/1000/containers"

[storage.options]
mount_program = "/usr/bin/fuse-overlayfs"

[storage.options.overlay]
mount_program = "/usr/bin/fuse-overlayfs"
mountopt = "nodev,fsync=0"

[containers]
log_driver = "file"
volumes = [
    "/home/sergi:/home/sergi:rslave"
]
default_capabilities = [
    "CAP_AUDIT_WRITE",
    "CAP_CHOWN",
    "CAP_DAC_OVERRIDE",
    "CAP_FOWNER",
    "CAP_FSETID",
    "CAP_KILL",
    "CAP_MKNOD",
    "CAP_NET_BIND_SERVICE",
    "CAP_NET_RAW",
    "CAP_SETGID",
    "CAP_SETPCAP",
    "CAP_SETUID",
    "CAP_SYS_CHROOT"
]

sudo mv /etc/containers/containers.conf /etc/containers/containers.conf.backup
sudo mv /usr/share/containers/containers.conf /usr/share/containers/containers.conf.backup

systemctl --user enable podman.socket
systemctl --user start podman.socket
systemctl --user status podman.socket

systemctl --user restart podman.socket

podman run hello-world

index