search

hashicorp / nomad-driver-podman

A nomad task driver plugin for sandboxing workloads in podman containers
https://developer.hashicorp.com/nomad/plugins/drivers/podman
Mozilla Public License 2.0
226 stars 63 forks source link

Rootless in combination with rootful #284

Closed skoppe closed 1 day ago

skoppe commented 1 year ago

I really like running workload in rootless containers.

However, I have not found a way to have both rootless and rootful containers on a single nomad node.

Because some things do need rootful containers, CSI plugins being one example, I see no alternative than switching to rootful.

Is there anything I am not aware about?

skoppe commented 1 year ago

I think something discussed in https://github.com/hashicorp/nomad-driver-podman/issues/84#issuecomment-1004325468 would make sense.

lgfa29 commented 10 months ago

Hi @skoppe đź‘‹

Thank you for the suggestion, I think that would be a very interesting feature.

Unfortunately, as the comment you link points out, this would be a very heave lift to implement, but I have placed this into our board for further roadmaping and triagging.

ygersie commented 7 months ago

Wouldn’t it be be possible to make the plugin name configurable and declare it twice in the config? Meaning one could spin up a job with:

driver = "podman"

Or

driver = "podman-rootless"
skoppe commented 4 months ago

Wouldn’t it be be possible to make the plugin name configurable and declare it twice in the config? Meaning one could spin up a job with

Yes, I have done exactly that.

It would be great if Nomad can jump on this rootless bandwagon and support it out of the box. Right not I am blocked on things like sidecars and csi mounts not working, and have to run those tasks as rootless.