Questions tagged [container]

The tag has no usage guidance, but it has a tag wiki.

Filter by
Sorted by
Tagged with
2 votes
1 answer
23 views

systemd: what is a "non-container" system?

Regarding exit.target, man systemd.special states it is: A special service unit for shutting down the system or user service manager. It is equivalent to poweroff.target on non-container systems, and ...
user avatar
0 votes
0 answers
21 views

Add IP addresses using lineinfile

I have a container.yml file, and I need to add a lineinfile task to add the IP addresses of three hosts. Ex: 101.101.101.10 k1 101.101.101.11 k2 101.101.101.12 k3 This is how I went on ...
user avatar
  • 1
0 votes
0 answers
48 views

subuid and subgid mappings not mapping the root user/group (UID/GID 0)

I'm getting started with running Docker 20.10.14 in rootless mode on Linux Mint 20 (based on Ubuntu 20.04). I've created a user named dockerd for this, UID 127 (with group dockerd, GID 139) and added ...
user avatar
  • 416
0 votes
1 answer
26 views

Running closed source scientific software

Suppose you are required to install a heavy scientific software like Matlab or Intel Quartus on your Linux workstation. This can become a broader enquiry, for any kind of closed source software (...
user avatar
  • 11
0 votes
0 answers
26 views

Unshare with overlayfs results in permission denied with su

I am trying to setup 'rootless' containers by hand, with just unshare and mounting overlayfs. Currently, I can unpack a rootfs tarball, setup a /tmp and /proc mount, and pivot_root/chroot into it ...
user avatar
0 votes
0 answers
47 views

Exposing a systemd service to systemd-nspawn container

I have a system with a bunch of services running on them. Some tasks require the ability to stop and start these services. Given an nspawn container running on a host, is there any way whatsoever to ...
user avatar
  • 53
0 votes
0 answers
62 views

Why do systemd-nspawn's network namespaces not work correctly without systemd running inside the container?

I am trying to run a systemd-nspawn container without an init system and inside of a systemd-nspawn-managed network namespace. My container is a stock Fedora 35 image, and I am invoking it like so: ...
user avatar
0 votes
0 answers
37 views

Build Singularity container using CentOS cloud image

I'm building a Singularity container using the standard library bootstrap agent based on a CentOS 7: BootStrap: library From: library://library/default/centos:7 I was wondering is it possible to use ...
user avatar
  • 431
0 votes
0 answers
6 views

how to run K8s pod replicas with few variable values in their conf?

I have to run some containers in K8s, more than 1 replicas for a microservice. I'm using configmaps to load the configuration of the microservice. There are few values that need. to be incrementally ...
user avatar
  • 1,603
1 vote
0 answers
50 views

Is there a way to do delta updates for container images w/o a registry?

In the context of a non-connected machine which has limited space available, is there a way to update the container image using a diff/patch mechanism? Like you call docker pull but on a binary patch ...
user avatar
0 votes
1 answer
66 views

Change Podman container IP address

I installed a mtproto proxy image with Podman. When I run it I get the error message that the 443 port is already in use. Indeed httpd is using it. I have another IP address in the same server that is ...
user avatar
  • 306
0 votes
0 answers
19 views

How can I best track agrs in the environment without using ps?

I am working with a customer BusyBox v1.23.2 container, trying to track args being passed in the environment. I wanted to use pslogger to show when foo is sent in the environment. However, the ps tool ...
user avatar
0 votes
1 answer
37 views

Is there any performance overhead due to android emulation on linux?

Is there any performance overhead due to android emulation on linux since android uses a linux kernel. Does it utilize the underlying kernel to achieve minimum performance overhead similar to a ...
user avatar
1 vote
1 answer
130 views

Singularity build error "No such file or directory" while %files is used to copy from host into singularity image

I have the following singularity definition file: Bootstrap: docker From: nvcr.io/nvidia/tensorflow:21.08-tf2-py3 %files /home/zfan/sandbox/Virgo_Algo/DevEnv/AMD/requirements.txt /tmp/...
user avatar
  • 145
1 vote
1 answer
31 views

Process that works on Ubuntu VM does not work on Ubuntu Docker Image

Basically, I'm installing a python package w/ pip that when run, will search the home directory for a config file and use the information on it to generate and send logs. I have this set up and ...
user avatar
  • 11
0 votes
0 answers
8 views

Grafana Network IN 4 times requestes in 2 min

I have a Docker container that keep restarting when certainl level network requests arrives. The host is on Azure. The cpu and memory are under the limits defined in the docker-compose every time it ...
user avatar
0 votes
0 answers
425 views

dmesg: read kernel buffer failed: Permission denied with root user in LXC container after Ubuntu upgrade

I had an LXC container running in Proxmox with Ubuntu 21.04. In this container dmesg worked as expected with a root user. I used do-release-upgrade and successfully upgraded the LXC container to ...
user avatar
  • 101
0 votes
0 answers
745 views

docker-compose returning ERROR: build path either does not exist, is not accessible, or is not a valid URL. after update

around last week I updated my system (Arch Arm on raspberry pi using pacman -Syu) and after that update every time I try to run docker-compose up -d I get : ERROR: build path /srv/http/revProxy either ...
user avatar
  • 1
0 votes
0 answers
21 views

Using Nsight Systems in Singularity Container

Recently, I tried to profile a multi-process application using Nsight Systems within a singularity container. The command I used within the container is “nsys profile -o SOME_DIR APP_COMMAND APP_ARGS”....
user avatar
  • 145
2 votes
1 answer
59 views

Why is running Linux on android via UserLAnd less performant?

Now that LinuxOnDex has been discontinued by Samsung a lot of people use UserLAnd to run Linux on their android phones instead. On the web i read a lot that running linux via UserLAnd is not very ...
user avatar
  • 73
0 votes
1 answer
199 views

Rocky Linux container with systemd on MacOS

I have this question which I hope is asked in the right place, if not, feel free to guide me. I'm developing several Ansible roles and using Molecule as a tool to test the roles against. Molecule uses ...
user avatar
  • 267
0 votes
1 answer
88 views

Debugging Applications Running in a Singularity Container in an IDE

I am developing algorithms within the framework of Tensorflow (custom OPs and graphs) within a Singularity container (with Ubuntu 20.04, CUDA 11.2 and the Tensorflow 2.4 library). I understand that ...
user avatar
  • 145
0 votes
1 answer
214 views

List containers from other users?

Is there a way to list all running podman containers on a machine, including those from other users? Even if I log in as root, podman ps -a just lists all containers for the user, but I want to see ...
user avatar
  • 232
0 votes
0 answers
70 views

How `xorg` and `xinit` are affecting my displays on host and in container:

Very brief summary: Either I can launch containerized GUI apps, or I can configure my display positioning, but not both. Part 1: i3 display configuration vs xorg display configuration. Resolved but ...
user avatar
0 votes
1 answer
166 views

Unable to start ubuntu through toolbox

I just installed Fedora 35 Kinoite and am taking it for a test drive. And, of course I am testing out the toolbox feature. Now I wanted to create & enter an Ubuntu container, it got created but ...
user avatar
  • 1,937
0 votes
0 answers
22 views

Singularity Container -- Conflict between "--nv" and "--writable"

I am trying to build a singularity sandbox (writable container) to run my CUDA app. In my understanding, a container can access host CUDA utilities (such as nvidia-smi and mps) through the flag "-...
user avatar
  • 145
0 votes
0 answers
24 views

Failed to Build Code in Container

I have a codebase successfully built in Linux SUSE with CUDA 11.4. The same codebase failed to build as it was bound to a container (image built with singularity) with a different Linux distribution (...
user avatar
  • 145
0 votes
1 answer
144 views

Install browser inside LXD container and run it on host OS

I am trying to install Brave browser inside an LXD container (Voidlinux - preferably, or linuxMint), create a shortcut for that app inside my host OS and launch it as any other linux app with the ...
user avatar
  • 141
0 votes
0 answers
86 views

process not killed even we used kill -9 and process actually was belong to container that already removed

here is a strange behavior that show how to kill a process , but actually process not killed example ( from rhel 7.6 server ) ps -ef | grep kafka-exporter root 15340 19528 0 17:25 pts/0 00:00:...
user avatar
  • 10.9k
0 votes
1 answer
130 views

Enable GNU Fortran 7.xy on CentOS 7.9: scl command not found

I'm trying to enable GNU Fortran ver 7.xy on a CentOS 7.9 image in a Singularity container. According to various sources on the internet I need to install the following packages with yum: yum install ...
user avatar
  • 431
2 votes
1 answer
111 views

How can I inspect the amount of layers in my image?

Let's say I want to inspect the amount of layers in my image, how many times the image has been modified before it came to its final form, how can I do this?
user avatar
  • 22.4k
0 votes
1 answer
76 views

Can an image be rolled back?

If I'm working on an image with multiple layers, is it possible to rollback to a previous layer or reset to another layer in the image's stack? What is the podman equivalent of git reset --hard HEAD^ ...
user avatar
  • 22.4k
0 votes
0 answers
62 views

Podman commit and squish into prior commit (equivalent of git commit --amend for podman?)

If I want to take a container and image it, is there a way to do so and squish the resulting layer at the same time. Ideally, I would be able to merge multiple layers of the resulting image (at least ...
user avatar
  • 22.4k
1 vote
2 answers
47 views

Can I pull an image down from a repo and save it locally as a different name?

I can pull down an image with podman pull podman pull alpine:3 This currently pulls the image down as, REPOSITORY TAG IMAGE ID CREATED SIZE docker.io/library/...
user avatar
  • 22.4k
0 votes
0 answers
99 views

Which parts of a (docker) container are loaded into memory?

I was wondering how containers and RAM/swap are related. Please correct me where I am wrong in my assumptions below. All container-related functionality that the kernel offers is always loaded into ...
user avatar
  • 1,842
0 votes
0 answers
87 views

LXC Debian 11 Container Launch Problem

Debian 11 stable, LXC from debian repo. lxc-create -t download -n my-container error lxc-create: my-container: conf.c: write_id_mapping: 2694 Operation not permitted - Failed to write uid mapping to &...
user avatar
0 votes
0 answers
28 views

Set up a container for building (or developing) an application

The short version: How do I set up a container where I can build something from source, with its code, tools, dependencies, etc. isolated from the rest of the system? The long version: So let’s say I’...
user avatar
0 votes
0 answers
34 views

Linux OpenJDK Distributions & Best Practices

There are many OpenJDK distributions available (Eclipse Temurin, Oracle OpenJDK, Semeru, etc). As mentioned here, it seems that the IcedTea project is how builds were made available for Debian based ...
user avatar
1 vote
0 answers
283 views

Enabling the memory controller on cgroup v2 on fedora 34

I am trying to install kubernetes on a fedora34 machine. The preflight fails with the following error: [ERROR SystemVerification]: missing required cgroups: memory I have been trying to find out ...
user avatar
2 votes
1 answer
311 views

Why does podman stop the container why I try to attach to it?

Just starting to learn containers so I probably have missed something / not read enough yet, but I have run into a strange behavior and am trying to understand what is happening. I tried googling but ...
user avatar
  • 317
1 vote
0 answers
69 views

cgroup memory usage is different from sum of memory usage of sub cgroups

The memory usage I see here: sudo cat /sys/fs/cgroup/memory/memory.usage_in_bytes is different the from the sum of memory usage of the sub cgroups, which I calculated by getting all the sub cgroups ...
user avatar
2 votes
1 answer
115 views

Redirect single file or directory using bubblewrap

I was wondering how one would use bubblewrap (bwrap) to redirect a single directory or file on Linux, while still allowing access to all other files? For example, if I wanted to make Firefox conform ...
user avatar
2 votes
1 answer
4k views

Podman volume mounts: When to use the :z or :Z suffix?

The Podman man pages explains for volume mounts/binds: Labeling systems like SELinux require that proper labels are placed on volume content mounted into a container. Without a label, the security ...
user avatar
  • 2,106
1 vote
1 answer
151 views

Is there a downside for running docker experimental features?

I know that Docker allows enabling experimental features on the daemon side in a rather simple way: Add/update /etc/docker/daemon.json: { "experimental": true } And enabling experimental ...
user avatar
0 votes
0 answers
153 views

Docker/Podman Selinux Udica - Rootless Container unable to mount/run from mapped entrypoint script

I like to use steamcmd as dockercontainer rootless for my serveruser. But steamcmd should normally installed with normal user under /opt/steam/steamcmd/steamcmd.sh I created a custom steamcmd.sh which ...
user avatar
1 vote
0 answers
91 views

Sar network monitoring seems inaccurate?

I've been monitoring my system using sar. I recently came across some interesting data: These are the stats for one of my Calico network devices... it seems to spike between ~0.2 Gbps and 20 Gpbs. The ...
user avatar
  • 556
1 vote
0 answers
19 views

Prevent container removal if it was started with --rm

Suppose I start a container like this: docker run --rm -it foo sh When I'm done with it it'll be removed automatically (--rm). Sometimes I start a container that way, customize it and perform some ...
user avatar
  • 1,413
1 vote
1 answer
116 views

Reset NixOS container

Nixos containers can be created declaring them in the configuration.nix. Is there way to 'reset' them, hence delete all data, and recreate the container?
user avatar
0 votes
0 answers
428 views

Isolating users running containers in the same account

Multiple users are running container images on the same user account on a supercomputer ("service account"). Each container mounts a folder that contains sensitive data. One service account ...
user avatar
0 votes
1 answer
50 views

lxc containers can ping host and can resolve dns internet addresses but cannot get to the internet

Debian Buster amd64 Two containers, 192.168.122.2,3 both can resolve but cannot get to the Internet Both containers can ping / interact with the host server. Here is what I have in iptables. # ...
user avatar

1
2 3 4 5