Open MGlolenstine opened 3 years ago
etrombly
commented
3 years ago I think this would be good. From looking at the docs you should be able to pull the image from dockerhub or build it directly with podman. Is there any specific change you needed?
MGlolenstine
commented
3 years ago Correct, I can use an image from Docker hub but have to modify the Dockerfile(e.g. fedora -> docker://fedora) to build the image myself. There's also another problem with Permission denied, which happens when accessing data to copy for the package.
There could be some other problems I'm not aware of though.
etrombly
commented
3 years ago So it looks like you need to use the long form to pull:
podman pull etrombly/rust-crosscompile:latest
it worked as root for me, I didn't set up to run as a regular user to test though.
MGlolenstine
commented
3 years ago Long version worked for me as well, but we can't run it as a regular user, which is the point of Podman. Podman is made to be rootless docker, so that you can get rid of many root exploits which are on docker.
MGlolenstine
commented
3 years ago So it looks like you need to use the long-form to pull:
podman pull etrombly/rust-crosscompile:latestit worked as root for me, I didn't set up to run as a regular user to test though.
I have a note about your reply.
podman pull docker://etrombly/rust-crosscompile:latest and if I remove the docker://, it returns the following error
Error: unable to pull etrombly/rust-crosscompile:latest: image name provided is a short name and no search registries are defined in the registries config file.because Podman tries to search their repos and can't find it.
etrombly
commented
3 years ago The permissions problem is because I run the compile and package as a different user in the container. For docker containers it makes sense, because you don't want to run things as root if you don't have to. But in rootless podman, root is actually the user you launch podman with. I see three options for fixing it:
Also if you are running on a system that has SELinux configure you may need to add :z to the end of the volume parameter.
-v $(pwd):/home/rust/src:zNot sure which would be the best, 1 is probably the easiest. Have to think on it a bit.
etrombly
commented
3 years ago I changed it back to running as root to build, can you test to see if that fixes it for you?
MGlolenstine
commented
3 years ago Surely, I'll test it out tomorrow when I get to work! Thanks for working on this!
Because docker has some limitations, especially the "must-be-root-to-run" one, I'd love to see Podman support, as it's often impossible to run docker as a root.