[FEAT]: podman & rootless containers

[jalberto]

Feature Description

I would love to have podman support for:

• cosmos itself
• the marketplace
• rootless for extra security

[RlndVt]

I've given rootful podman some testing and made the following findings:

• Do not install podman-docker or equivalent.
  • This will create a symlink at /var/run/docker.sock pointing to /run/podman/podman.sock; which will confuse cosmos-server as from it's perspective (from /mnt/host/) /run/podman/podman.sock doesn't exist. cosmos-server will then attempt to create /mnt/host/var/run/docker.sock, which fails because a file does exist (but points to 'nothing').
• Run use the following command:
  • # podman run -d -p 80:80 -p 443:443 -p 4242:4242/udp --privileged --name cosmos-server -h cosmos-server --restart=always -v /run/podman/podman.sock:/var/run/docker.sock -v /:/mnt/host -v /var/lib/cosmos:/config azukaar/cosmos-server:latest

From here cosmos-server starts and 'works', except for the servapps page, which is just blank. (I'm assuming that that's because a certain 'docker' call to the socket isn't exactly reproduced by the podman socket; if that's the case it's (probably) a podman bug but that would take some digging.

[CavaleriOmar]

I'm trying to install it on my almalinux 9 server (I set up the docker-podman alias, otherwise it's the default almalinux installation), and aside from having to manually create it myself in advance /run/podman/podman.sock and /var/lib/cosmos I followed that string exactly.

The cosmos-server container installation goes perfectly, I run the wizard, it recognizes the (fake) presence of docker, but at the time of installing mongodb, it stops.

I check from cockpit-podman and see that the problem is that the mongodb container won't start:

Failed to start container cosmos-mongo-KxE
crun: cannot set memory swappiness with cgroupv2: OCI runtime error