Use pasta’s –map-guest-addr option As of Podman 5.0 we default to “pasta” as a rootless networking application to provide network connectivity for rootless containers. Compared to our previous default, slirp4netns, pasta works a bit differently. For instance, pasta, by default, does not use Network Address Translation (NAT). This means it will copy the host address…
Podman machine’s primary virtualization driver is referred to as a “provider”. In April 2024, I added support for the krun as a provider for MacOS. We made little mention of the addition, because we also needed to tidy up items like regression testing, testing environments, and details around support. But as we near completion of…
Anyone mildly familiar with Ansible will attest, maintaining idempotency is a key secret-sauce to stable automation. Without idempotency, it’s all but impossible to detect drift and/or predictably manage state changes. Similarly, anyone beyond a complete-beginning Podman user, will know that defining and using volumes are essential operations. Now for the problem: In Ansible-land, the template…
Boilerplate walkthrough rootless systemd podman-service, inside a rootless podman container.
One of the questions we in the Podman world often are asked is “Why can’t my container resolve other containers by name?” In many of the cases, the answer is … because you are running on a network with name resolution disabled. In fact, you are likely running on the *default* network; which indeed does…
It’s Friday and I thought I would share something I learned today. Like many things, the documentation is out there but it took a little finesse to put it all together. So here is hoping it helps someone in the future who hits this searching for an answer to a problem. We want the netavark-dhcp-proxy,…
I have yet to bump into perfect software. Bugs, failures, and short-comings are the reality of software developers. They often have upsides whether it might be learning about a new area of code in a larger application or coming up with ideas to prevent problems. We had an interesting problem brought to our attention recently…
You might not know this but Podman has been running with less capabilities then Docker for a while now. Not only does Podman default to running rootless but even in rootless mode, it runs tighter then Docker. Docker runs with 14 root capabilities while Podman runs with 10. However, this has been via distribution defaults…
Developers are always asking us about how to customize Podman machine to add or subtract content. Up until recently, the answer has always been to use the cosa tooling to create the operating system and a qcow image. The process is not particularly difficult but it does help to have fast disk I/O […]
From running containers without root privileges to using REST API’s in Podman 2.0, these 12 guides can enhance how you use the Pod Manager tool. I must say that I am quite jealous of Podman. While I had to stay at home for most of 2020, Podman went on a world tour at a velocity…
Sign up with your email address to receive updates by email from this website.