Hacker News new | ask | show | jobs
by sunshine-o 1001 days ago
Quadlets are very much a welcomed integration but last time I tried to create an users Quadlet in .config/containers/systemd/ with a linuxserver.io image I ended up with all sort of files owned by strange UID & GID.

So I had to add --userns keep-id to my container unit what caused all sort of problem because of podman apparently.

So you always end up with the kind of investigation & fiddling that shouldn't be necessary after 10 years of docker & containers.

1 comments

I believe this is due to the linuxserver.io images actually being customized specifically for usage with docker.

For images intended for rootless deployments e.g. podman, take a look at the onedr0p container images, https://github.com/onedr0p/containers

Thank it looks great ! and yes, I believe it is the policy of linuxserver.io not to test or support officially podman.

I have been trusting the plan but I notice that after 10 years of container industry standard etc. we have to search for podman friendly images to enjoy integration with the common Linux service manager...

Now if container-based Linux distributions are the future I'm starting to wonder if we are not gonna soon see RedHat & co. packaging docker images in RPMs to make sure guarantee things work together & people don't badly mess up the security...

Fun fact, OpenSUSE actually already does that for some common server software (LDAP, dovecot, etc); they're quadlet/systemd unit files packaged up as RPMs though, I don't think they actually include the container image.
Garch, they already put the container in a package. We've gone full circle...