[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Qemu-devel] [PATCH v3 2/6] docker.py: add podman support
From: |
Daniel P . Berrangé |
Subject: |
Re: [Qemu-devel] [PATCH v3 2/6] docker.py: add podman support |
Date: |
Mon, 15 Jul 2019 10:58:54 +0100 |
User-agent: |
Mutt/1.12.0 (2019-05-25) |
On Sat, Jul 13, 2019 at 06:33:07PM +0400, Marc-André Lureau wrote:
> Add a --engine option to select either docker, podman or auto.
>
> Among other advantages, podman allows to run rootless & daemonless
> containers, fortunately sharing compatible CLI with docker.
>
> With current podman, we have to use a uidmap trick in order to be able
> to rw-share the ccache directory with the container user.
>
> With a user 1000, the default mapping is:
>
> 1000 (host) -> 0
> (container).
> So write access to /var/tmp/ccache ends will end with permission
> denied error.
>
> With "--uidmap 1000:0:1 --uidmap 0:1:1000", the mapping is:
> 1000 (host) -> 0 (container, 1st namespace) -> 1000 (container, 2nd
> namespace).
> (the rest is mumbo jumbo to avoid holes in the range of UIDs)
>
> A future podman version may have an option such as --userns-keep-uid.
> Thanks to Debarshi Ray <address@hidden> for the help!
>
> Signed-off-by: Marc-André Lureau <address@hidden>
> Acked-by: Alex Bennée <address@hidden>
> ---
> tests/docker/docker.py | 48 +++++++++++++++++++++++++++++++++++++-----
> 1 file changed, 43 insertions(+), 5 deletions(-)
Reviewed-by: Daniel P. Berrangé <address@hidden>
Regards,
Daniel
--
|: https://berrange.com -o- https://www.flickr.com/photos/dberrange :|
|: https://libvirt.org -o- https://fstop138.berrange.com :|
|: https://entangle-photo.org -o- https://www.instagram.com/dberrange :|
- [Qemu-devel] [PATCH v3 0/6] tests/docker: add podman support, Marc-André Lureau, 2019/07/13
- [Qemu-devel] [PATCH v3 1/6] docker.py: add --run-as-current-user, Marc-André Lureau, 2019/07/13
- [Qemu-devel] [PATCH v3 2/6] docker.py: add podman support, Marc-André Lureau, 2019/07/13
- Re: [Qemu-devel] [PATCH v3 2/6] docker.py: add podman support,
Daniel P . Berrangé <=
- [Qemu-devel] [PATCH v3 3/6] tests/docker: add podman support, Marc-André Lureau, 2019/07/13
- [Qemu-devel] [PATCH v3 4/6] tests: specify the address family when checking bind, Marc-André Lureau, 2019/07/13
- [Qemu-devel] [PATCH v3 5/6] test-char: skip tcp tests if ipv4 check failed, Marc-André Lureau, 2019/07/13
- [Qemu-devel] [PATCH v3 6/6] test: skip tests if socket_check_protocol_support() failed, Marc-André Lureau, 2019/07/13