Rootless podman - Githubissues

SSSD / sssd-ci-containers

Setup containerized environment for testing and developing SSSD.

GNU General Public License v3.0

9 stars 21 forks source link

Rootless podman #90

Open alealexpro100 opened 6 months ago

alealexpro100 commented 6 months ago

Are there any plans to make it working under podman rootless? Found errors:

Samba provision does not work (this fix didn't work).
PolKit does not work causing firewalld not configuring.

pbrezina commented 6 months ago

Hi, it would be nice to have, but I don't think it is currently possible. We are creating our own network so we have static addresses that we can use in DNS and as far as I know, this is not possible in rootless mode.

alealexpro100 commented 6 months ago

Podman creates network without issues, but host cannot access to containers by IP addresses (it can be bypassed by using port forward). Also, SSSD works incorrectly in rootless ipa container (su admin@IPA.TEST returns su: cannot set groups: Invalid argument), but it seems to be related here.

pbrezina commented 6 months ago

May I ask what is your intended use case for this project?

alealexpro100 commented 6 months ago

Sorry for the late answer. I was trying to run it in rootless mode for CI on one machine using several pipelines. Rootless mode prevents possible causes of failed operations (like broken systemd), so that was the reason of using it. VMs, unfortunately, are not effective (performance loss in 20%).