Questions tagged [container]
353
questions
0
votes
0
answers
50
views
Established but hidden TCP connection
On computer 10.196.111.161, I can see the following established tcp connection:
[10.196.111.161]# netstat -natp | grep 7000
Proto Recv-Q Send-Q Local Address Foreign Address State ...
- 101
0
votes
0
answers
18
views
EOVERFLOW when opening any file for writing
I'm writing a custom container engine. When I attempt to open any file for writing somewhere in the container (as long as that place is writeable, permissions-wise), I get an EOVERFLOW error (Value ...
- 124
0
votes
1
answer
23
views
podman fails with 'Error relocating' / 'RELRO protection failed'; ~/.local/share/containers a link to a different location
Trying to run any pods on Podman fails, after an SELinux relabeling
$ podman run -ti alpine
Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed: No error information
Error relocating /...
- 111
0
votes
0
answers
37
views
Running a wayland compositor inside Docker
I am looking for a way to run a Wayland compositor (like Hyprland) inside a docker container. I know I can run it inside Distrobox, but I don't want to run the whole system inside of the container, ...
- 1
0
votes
0
answers
37
views
Why can't I enable systemd services created with podman generate?
Given this setup:
---
version "3"
services:
wireguard:
image: "lscr.io/linuxserver/wireguard"
container_name: "wireguard"
cap_add:
- "NET_ADMIN&...
- 1,835
0
votes
1
answer
22
views
cgroups between containers
I am trying to find out a way to move a process back to the original cgroup after I moved it to a new cgroup under my hierarchy.
The situation is k8s cluster, I have a pod on a node (container) and I ...
- 1
0
votes
2
answers
59
views
Can netfilter act as a DHCP relay?
I'm wondering whether instead of using a DHCP relay netfilter (be that tc or nftables) can be used to route DHCP broadcast packets to a Docker container attached to a bridge.
The reasoning for this is ...
0
votes
0
answers
39
views
How to make a restrictive syscall *whitelist* with systemd-nspawn?
I'm trying to lock down a container using systemd-nspawn, so that only the specific syscalls I whitelist are allowed. Per the documentation, there's a pretty lax filter in place by default, ...
0
votes
1
answer
177
views
podman - containers stuck in stopping state after reboot
I have now bumped into this problem several times - some podman containers get stuck in the stopping state, but I'm not sure how to tackle the problem.
[grant@patches patches]$ podman ps -a
CONTAINER ...
- 515
1
vote
0
answers
44
views
How do I use abuild inside of a Distrobox container?
I want to use Alpine inside of a Distrobox container using the alpine-toolbox-edge image and do various tasks involving the abuild program. I followed the instructions in the "Creating an Alpine ...
- 876
1
vote
0
answers
16
views
Effects of dropping "AUDIT_WRITE", "KILL", "SETFCAP" and "SETPCAP" capabilities while running docker
I'm exploring Docker container capabilities and permissions and I'm curious about the implications of dropping the "AUDIT_WRITE", "KILL", "SETFCAP" and "SETPCAP"...
0
votes
1
answer
72
views
Container - Id is shown as 2000
I installed Oracle Container using the image: oracleinanutshell/oracle-xe-11g:latest - on a Linux machine.
While doing, I copied one .sql file into /docker-entrypoint-initdb.d using "volumes"...
0
votes
0
answers
39
views
Execute bash command from container (flatpak) in the main OS
Here's my problem. I am running flatpak steam and I want to interact with libratbag for managing my mouse poll rate. Running my custom command from the game launch options won't work, as everything is ...
- 151
1
vote
1
answer
53
views
podman running as user dies after hard reboot - Method gave invalid 400 URI Failure message: Failed to setgroups - setgroups (22: Invalid argument)
I'm struggling to determine what is going on here. Podman running in user space was running fine, but the server took a hard reboot and now it is... for lack of a more accurate technical assessment, ...
- 515
1
vote
1
answer
159
views
Where did podman put my container?
I just installed AlmaLinux 9 (a Red Hat 9 clone), and setup containers with podman which is the new standard for RH9. Following some instructions online, I succesfully downloaded and ran a container ...
- 1,630
0
votes
1
answer
73
views
nginx container networking DNS resolves to incorrect IP address
The patches-nginx container is incorrectly resolving the IP address of patches-backend within the nginx process but not when I check it manually from the nginx command line.
I have nginx running as a ...
- 515
1
vote
1
answer
137
views
How to run a script without sh prefix inside the container
We are running containers on open shift platform. The application pods are running fine. We able to login to the pod using the below command
oc exec -it <podname> -- /bin/bash
also tried /bin/...
- 207
0
votes
0
answers
42
views
aws efs and container caps to be able to run `mount nfs` inside the container manually
I'm running a pod inside aws eks 1.26. I need to mount aws efs via kubectl exec operation and fail if the POD is not started with privileged container.
What priviliges are required for the container ...
- 755
0
votes
0
answers
52
views
Differences between overloay and underlay in Apptainer
I'm trying to understand the differences between the two ways of bindings filesystems in Apptainer configuration. The documentation can be found here, but here are the confusing parts:
enable overlay:...
- 143
2
votes
1
answer
24
views
Redirecting locally originated traffic with DNAT in OUTPUT chain not working as expected
I am having a dumb, and I am hoping you lovely people can jumpstart my brain.
I am running a service in a local network namespace. The namespace looks like this:
# ip -n ns1 addr
1: lo: <LOOPBACK,...
- 32.8k
0
votes
1
answer
129
views
Can't start nginx podman container with user service file
I have an nginx container that runs as part of a service. This is the function code used to start all the containers including nginx:
if [[ ! -s ${SCRIPT_DIR}/.container-info-patches.txt ]]; then
...
- 515
0
votes
1
answer
55
views
What containers provide systemd aside from RHEL's UBI?
I have an application I must containerize and it has a dependency on systemd during installation I can't change. It does not need systemd to run, it just has to be there during install. So far, the ...
- 515
0
votes
0
answers
46
views
How to simulate mv failing in a non-privileged Docker container?
An application inside a non-privileged Docker container executes mv <source_file> <dest_dir> under root, where <source_file> must be an existing regular file and <dest_dir> ...
- 850
0
votes
0
answers
500
views
Connection refused for unsecure Gitlab container registry
I'm hosting a gitlab-ce instance with runners on a Ubuntu 22.04.2 LTS server with docker compose :
version: '3.7'
services:
web:
image: 'gitlab/gitlab-ce:latest'
restart: always
hostname:...
- 41
2
votes
0
answers
106
views
Do I need to stop or pause a container before I export a volume?
To avoid an inconsistent volume backup, I pause (or outright stop) a container before I copy the contents of the volume. Is this still necessary when backing up containers via podman volume export, or ...
- 958
-1
votes
1
answer
208
views
Error with docker container init caused \"could not create session key
After I installed docker, I grabbed the hello-word image, but I couldn't run the container.
When I run
docker container run -it hello-world
I get the following error:
docker: Error response from ...
- 1
0
votes
1
answer
169
views
How to synchronize files between a NixOS declarative container and local system path (equivalent of docker-compose volumes functionality)?
I have NixOS 22.11 set up on a local workstation.
I use extra-container package, which can run declarative NixOS containers like imperative containers, without system rebuilds.
I'm trying to run a ...
- 241
5
votes
1
answer
387
views
Disk space and inodes appear to consume RAM in a Docker container
I'm trying to determine why a web server running in a Dockerized environment is consuming more memory than I expect it to. While investigating this problem, I discovered the following behavior which ...
1
vote
1
answer
252
views
How to hide parent container in i3?
I'm using pretty much the standard i3 config and sometimes I press the wrong keys and this extra bar shows up at the top:
I believe it's the "parent container"? How do I hide the bar again? ...
- 2,980
0
votes
0
answers
189
views
Docker - Portainer: How to set up a local volume to store data which came from a container?
I have a docker container which is running in portainer, this is a kind of download server. Downloading files from the internet works, but I can't declare a local Volume in portainer to store the ...
- 1
0
votes
0
answers
86
views
Bluetooth hci0 not working for Golang application in container but hcitool scan works
I have built a Go Bluetooth low-energy application that can read data from Xiaomi Mi Flora sensors, and it's working great. Now I wanted to containerize it, but I'm failing. From within the container, ...
- 1
1
vote
1
answer
684
views
Process not receiving SIGTERM in Docker container
I've got a simple Python process running in a Docker container:
Dockerfile:
FROM ubuntu:18.04
RUN apt -y update && apt -y install python3
COPY app.py /app/
WORKDIR /app
ENTRYPOINT ["./app....
- 697
0
votes
0
answers
61
views
Docker containers inaccessible in browser after reboot - Raspberry Pi 4
Raspberry Pi 4
Raspberry Pi OS Lite
Docker 23.0.0
Docker containers are not accessible in the browser after reboot, I thought it may have been because the containers do not start, but it appears that ...
- 1
0
votes
0
answers
1k
views
sudo apt-get update failing inside Docker container running Ubuntu 20.04.03 LTS
Inside my docker container, whenever I try to execute the following command sudo apt-get update. It fails with the following error:
lab@f482bded4be2:~$ sudo apt-get update
Hit:1 http://security.ubuntu....
- 97
0
votes
1
answer
74
views
Docker network and container use the LAN
I have a LAN with 192.168.2.0/24.
A docker machine with two network cards
eth0: 192.168.2.150/24
eth1: 192.168.2.151/24
I use 192.168.2.150 to manage the docker machine.
I want to broadcast the ...
- 1
1
vote
0
answers
159
views
Running containers on RPi with buildroot: problems with CNI
I'm currently trying to get containers to run on my RPi (CM4 module) using buildroot.
I've configured the kernel and additional packages such that I should be able to run containers. I can verify that ...
- 11.2k
1
vote
1
answer
56
views
Using Unison to sync my desktop computer with a container in the cloud
I'd like to use Unison to sync a directory between my desktop computer and a container that lives in the cloud. I have this kind of working with Unison, but the problem I'm seeing is that every time I ...
- 121
0
votes
0
answers
173
views
Clarify OCI / container usage with `ctr`
I'm trying to handle docker / OCI images on a raspberry pi with buildroot.
I'm not exactly an expert on using containers and the way this works right now, confuses me.
I'm running a container like ...
- 11.2k
0
votes
0
answers
253
views
proxmox lxc container cannot write to mounted folder
I'm running proxmox on a laptop and it has a second hard drive. I want to use this second hard drive as a shared drive for all my VMs and containers running on this Proxmox.
https://steamforge.net/...
- 311
0
votes
0
answers
36
views
Difference between starting a stopped container and creating a new one
I am new to docker and wondering about what the difference is between:
Running a previously stopped Docker container
Creating and running a container from the same image as you would a stopped ...
- 41
1
vote
1
answer
857
views
Host-wide consequences of setting SELinux z/Z option on container bind mounts
When running podman containers with volume mounts, it is often necessary to add the :z (or :Z) parameter to the mount path. It is due to SELinux and its type enforcement. What the parameter does is it ...
- 271
0
votes
0
answers
744
views
ls: can't open '.': Permission denied in podman container
I have the following directory (on my host):
drwxr-xr-x@ - mnj mnj 15 Dec 21:02 -- mocks/
It's owned by me (mnj) and everyone should have at least READ access to it.
I'm running a podman ...
- 271
1
vote
2
answers
540
views
How to get only the unit names using systemctl?
When I do
systemctl list-units --all --state=loaded
I get the output in of each unit with columns as
UNIT LOAD ACTIVE SUB DESCRIPTION
I need only the UNIT in output.
I tried adding --...
- 111
0
votes
1
answer
389
views
Failed to get login PTY: Failed to activate service 'org.freedesktop.systemd1'
Been trying to understand and play around with systemd-nspawn because I'd like to run a Debian Testing install for myself without enabling the testing repos on my main Debian stable system.
I wrote ...
- 25
0
votes
0
answers
654
views
How can I mount a cifs share as a volume from a rootless podman container?
Say I create a named volume
podman volume create --opt type=cifs --opt o=async --opt device=//mynas.lan/steamcache steamcache
According to podman volume inspect, this volume's mountpoint is
/home/me/....
- 143
2
votes
0
answers
150
views
Can I restrict a process' access to the filesystem using `systemd-run --user`?
I am looking for a way to run a process with limited privileges and limited access to the filesystem. I was hoping to use systemd-run to do this, which works perfectly when run as root:
$ sudo ...
- 572
2
votes
1
answer
1k
views
Image in use by seemingly non-existent container
I've got Podman 3.4.4 running on Ubuntu 22.04 and see an obsolete image listed in podman images:
<none> <none> fa715d6fb372 6 days ago 585 MB
I ran
podman rmi fa715d6fb372
...
- 697
4
votes
1
answer
232
views
Are any large-scale services based on NixOS or Guix System?
Following the permeation of virtualization and containerization through world of network services, various tools and systems have emerged for provisioning and orchestrating such systems from ...
- 330
1
vote
0
answers
562
views
Copy from Docker to the host
I'm newbie in docker world. I have a docker inside a Virtualbox image, and I want to copy files to the host. I tried as it is written here, and on many sites:
https://linuxhandbook.com/cp-command/
me@...
- 11
0
votes
1
answer
573
views
How to resolve /etc/mtab symlink permission error when using podman additional image store?
Summary: I am attempting to use additional image stores with podman on an Ubuntu server, but I am experiencing permissions issues. The shared image does show up when running podman images. When I try ...
- 13