Questions tagged [container]

The tag has no usage guidance, but it has a tag wiki.

Filter by
Sorted by
Tagged with
0 votes
0 answers
50 views

Established but hidden TCP connection

On computer 10.196.111.161, I can see the following established tcp connection: [10.196.111.161]# netstat -natp | grep 7000 Proto Recv-Q Send-Q Local Address Foreign Address State ...
meolic's user avatar
  • 101
0 votes
0 answers
18 views

EOVERFLOW when opening any file for writing

I'm writing a custom container engine. When I attempt to open any file for writing somewhere in the container (as long as that place is writeable, permissions-wise), I get an EOVERFLOW error (Value ...
pxeger's user avatar
  • 124
0 votes
1 answer
23 views

podman fails with 'Error relocating' / 'RELRO protection failed'; ~/.local/share/containers a link to a different location

Trying to run any pods on Podman fails, after an SELinux relabeling $ podman run -ti alpine Error relocating /lib/ld-musl-x86_64.so.1: RELRO protection failed: No error information Error relocating /...
caxcaxcoatl's user avatar
0 votes
0 answers
37 views

Running a wayland compositor inside Docker

I am looking for a way to run a Wayland compositor (like Hyprland) inside a docker container. I know I can run it inside Distrobox, but I don't want to run the whole system inside of the container, ...
Skizy's user avatar
  • 1
0 votes
0 answers
37 views

Why can't I enable systemd services created with podman generate?

Given this setup: --- version "3" services: wireguard: image: "lscr.io/linuxserver/wireguard" container_name: "wireguard" cap_add: - "NET_ADMIN&...
telometto's user avatar
  • 1,835
0 votes
1 answer
22 views

cgroups between containers

I am trying to find out a way to move a process back to the original cgroup after I moved it to a new cgroup under my hierarchy. The situation is k8s cluster, I have a pod on a node (container) and I ...
Aviram's user avatar
  • 1
0 votes
2 answers
59 views

Can netfilter act as a DHCP relay?

I'm wondering whether instead of using a DHCP relay netfilter (be that tc or nftables) can be used to route DHCP broadcast packets to a Docker container attached to a bridge. The reasoning for this is ...
Synthetic Ascension's user avatar
0 votes
0 answers
39 views

How to make a restrictive syscall *whitelist* with systemd-nspawn?

I'm trying to lock down a container using systemd-nspawn, so that only the specific syscalls I whitelist are allowed. Per the documentation, there's a pretty lax filter in place by default, ...
SwarmOfBees's user avatar
0 votes
1 answer
177 views

podman - containers stuck in stopping state after reboot

I have now bumped into this problem several times - some podman containers get stuck in the stopping state, but I'm not sure how to tackle the problem. [grant@patches patches]$ podman ps -a CONTAINER ...
Grant Curell's user avatar
1 vote
0 answers
44 views

How do I use abuild inside of a Distrobox container?

I want to use Alpine inside of a Distrobox container using the alpine-toolbox-edge image and do various tasks involving the abuild program. I followed the instructions in the "Creating an Alpine ...
Newbyte's user avatar
  • 876
1 vote
0 answers
16 views

Effects of dropping "AUDIT_WRITE", "KILL", "SETFCAP" and "SETPCAP" capabilities while running docker

I'm exploring Docker container capabilities and permissions and I'm curious about the implications of dropping the "AUDIT_WRITE", "KILL", "SETFCAP" and "SETPCAP"...
arsalan yavari's user avatar
0 votes
1 answer
72 views

Container - Id is shown as 2000

I installed Oracle Container using the image: oracleinanutshell/oracle-xe-11g:latest - on a Linux machine. While doing, I copied one .sql file into /docker-entrypoint-initdb.d using "volumes"...
user3055964's user avatar
0 votes
0 answers
39 views

Execute bash command from container (flatpak) in the main OS

Here's my problem. I am running flatpak steam and I want to interact with libratbag for managing my mouse poll rate. Running my custom command from the game launch options won't work, as everything is ...
Tommaso Seneci's user avatar
1 vote
1 answer
53 views

podman running as user dies after hard reboot - Method gave invalid 400 URI Failure message: Failed to setgroups - setgroups (22: Invalid argument)

I'm struggling to determine what is going on here. Podman running in user space was running fine, but the server took a hard reboot and now it is... for lack of a more accurate technical assessment, ...
Grant Curell's user avatar
1 vote
1 answer
159 views

Where did podman put my container?

I just installed AlmaLinux 9 (a Red Hat 9 clone), and setup containers with podman which is the new standard for RH9. Following some instructions online, I succesfully downloaded and ran a container ...
TSG's user avatar
  • 1,630
0 votes
1 answer
73 views

nginx container networking DNS resolves to incorrect IP address

The patches-nginx container is incorrectly resolving the IP address of patches-backend within the nginx process but not when I check it manually from the nginx command line. I have nginx running as a ...
Grant Curell's user avatar
1 vote
1 answer
137 views

How to run a script without sh prefix inside the container

We are running containers on open shift platform. The application pods are running fine. We able to login to the pod using the below command oc exec -it <podname> -- /bin/bash also tried /bin/...
Malaiselvan's user avatar
0 votes
0 answers
42 views

aws efs and container caps to be able to run `mount nfs` inside the container manually

I'm running a pod inside aws eks 1.26. I need to mount aws efs via kubectl exec operation and fail if the POD is not started with privileged container. What priviliges are required for the container ...
DmitrySemenov's user avatar
0 votes
0 answers
52 views

Differences between overloay and underlay in Apptainer

I'm trying to understand the differences between the two ways of bindings filesystems in Apptainer configuration. The documentation can be found here, but here are the confusing parts: enable overlay:...
Shan-x's user avatar
  • 143
2 votes
1 answer
24 views

Redirecting locally originated traffic with DNAT in OUTPUT chain not working as expected

I am having a dumb, and I am hoping you lovely people can jumpstart my brain. I am running a service in a local network namespace. The namespace looks like this: # ip -n ns1 addr 1: lo: <LOOPBACK,...
larsks's user avatar
  • 32.8k
0 votes
1 answer
129 views

Can't start nginx podman container with user service file

I have an nginx container that runs as part of a service. This is the function code used to start all the containers including nginx: if [[ ! -s ${SCRIPT_DIR}/.container-info-patches.txt ]]; then ...
Grant Curell's user avatar
0 votes
1 answer
55 views

What containers provide systemd aside from RHEL's UBI?

I have an application I must containerize and it has a dependency on systemd during installation I can't change. It does not need systemd to run, it just has to be there during install. So far, the ...
Grant Curell's user avatar
0 votes
0 answers
46 views

How to simulate mv failing in a non-privileged Docker container?

An application inside a non-privileged Docker container executes mv <source_file> <dest_dir> under root, where <source_file> must be an existing regular file and <dest_dir> ...
Martin Heralecký's user avatar
0 votes
0 answers
500 views

Connection refused for unsecure Gitlab container registry

I'm hosting a gitlab-ce instance with runners on a Ubuntu 22.04.2 LTS server with docker compose : version: '3.7' services: web: image: 'gitlab/gitlab-ce:latest' restart: always hostname:...
Baks's user avatar
  • 41
2 votes
0 answers
106 views

Do I need to stop or pause a container before I export a volume?

To avoid an inconsistent volume backup, I pause (or outright stop) a container before I copy the contents of the volume. Is this still necessary when backing up containers via podman volume export, or ...
Tenders McChiken's user avatar
-1 votes
1 answer
208 views

Error with docker container init caused \"could not create session key

After I installed docker, I grabbed the hello-word image, but I couldn't run the container. When I run docker container run -it hello-world I get the following error: docker: Error response from ...
luye's user avatar
  • 1
0 votes
1 answer
169 views

How to synchronize files between a NixOS declarative container and local system path (equivalent of docker-compose volumes functionality)?

I have NixOS 22.11 set up on a local workstation. I use extra-container package, which can run declarative NixOS containers like imperative containers, without system rebuilds. I'm trying to run a ...
protob's user avatar
  • 241
5 votes
1 answer
387 views

Disk space and inodes appear to consume RAM in a Docker container

I'm trying to determine why a web server running in a Dockerized environment is consuming more memory than I expect it to. While investigating this problem, I discovered the following behavior which ...
Resigned June 2023's user avatar
1 vote
1 answer
252 views

How to hide parent container in i3?

I'm using pretty much the standard i3 config and sometimes I press the wrong keys and this extra bar shows up at the top: I believe it's the "parent container"? How do I hide the bar again? ...
finefoot's user avatar
  • 2,980
0 votes
0 answers
189 views

Docker - Portainer: How to set up a local volume to store data which came from a container?

I have a docker container which is running in portainer, this is a kind of download server. Downloading files from the internet works, but I can't declare a local Volume in portainer to store the ...
Gool's user avatar
  • 1
0 votes
0 answers
86 views

Bluetooth hci0 not working for Golang application in container but hcitool scan works

I have built a Go Bluetooth low-energy application that can read data from Xiaomi Mi Flora sensors, and it's working great. Now I wanted to containerize it, but I'm failing. From within the container, ...
newduino's user avatar
1 vote
1 answer
684 views

Process not receiving SIGTERM in Docker container

I've got a simple Python process running in a Docker container: Dockerfile: FROM ubuntu:18.04 RUN apt -y update && apt -y install python3 COPY app.py /app/ WORKDIR /app ENTRYPOINT ["./app....
Daniel Walker's user avatar
0 votes
0 answers
61 views

Docker containers inaccessible in browser after reboot - Raspberry Pi 4

Raspberry Pi 4 Raspberry Pi OS Lite Docker 23.0.0 Docker containers are not accessible in the browser after reboot, I thought it may have been because the containers do not start, but it appears that ...
Yeah Nah's user avatar
0 votes
0 answers
1k views

sudo apt-get update failing inside Docker container running Ubuntu 20.04.03 LTS

Inside my docker container, whenever I try to execute the following command sudo apt-get update. It fails with the following error: lab@f482bded4be2:~$ sudo apt-get update Hit:1 http://security.ubuntu....
Black Frog's user avatar
0 votes
1 answer
74 views

Docker network and container use the LAN

I have a LAN with 192.168.2.0/24. A docker machine with two network cards eth0: 192.168.2.150/24 eth1: 192.168.2.151/24 I use 192.168.2.150 to manage the docker machine. I want to broadcast the ...
mbyou's user avatar
  • 1
1 vote
0 answers
159 views

Running containers on RPi with buildroot: problems with CNI

I'm currently trying to get containers to run on my RPi (CM4 module) using buildroot. I've configured the kernel and additional packages such that I should be able to run containers. I can verify that ...
polemon's user avatar
  • 11.2k
1 vote
1 answer
56 views

Using Unison to sync my desktop computer with a container in the cloud

I'd like to use Unison to sync a directory between my desktop computer and a container that lives in the cloud. I have this kind of working with Unison, but the problem I'm seeing is that every time I ...
Douglas's user avatar
  • 121
0 votes
0 answers
173 views

Clarify OCI / container usage with `ctr`

I'm trying to handle docker / OCI images on a raspberry pi with buildroot. I'm not exactly an expert on using containers and the way this works right now, confuses me. I'm running a container like ...
polemon's user avatar
  • 11.2k
0 votes
0 answers
253 views

proxmox lxc container cannot write to mounted folder

I'm running proxmox on a laptop and it has a second hard drive. I want to use this second hard drive as a shared drive for all my VMs and containers running on this Proxmox. https://steamforge.net/...
Curious101's user avatar
0 votes
0 answers
36 views

Difference between starting a stopped container and creating a new one

I am new to docker and wondering about what the difference is between: Running a previously stopped Docker container Creating and running a container from the same image as you would a stopped ...
Bunny's user avatar
  • 41
1 vote
1 answer
857 views

Host-wide consequences of setting SELinux z/Z option on container bind mounts

When running podman containers with volume mounts, it is often necessary to add the :z (or :Z) parameter to the mount path. It is due to SELinux and its type enforcement. What the parameter does is it ...
mnj's user avatar
  • 271
0 votes
0 answers
744 views

ls: can't open '.': Permission denied in podman container

I have the following directory (on my host): drwxr-xr-x@ - mnj mnj 15 Dec 21:02 -- mocks/ It's owned by me (mnj) and everyone should have at least READ access to it. I'm running a podman ...
mnj's user avatar
  • 271
1 vote
2 answers
540 views

How to get only the unit names using systemctl?

When I do systemctl list-units --all --state=loaded I get the output in of each unit with columns as UNIT LOAD ACTIVE SUB DESCRIPTION I need only the UNIT in output. I tried adding --...
Shivam Papat's user avatar
0 votes
1 answer
389 views

Failed to get login PTY: Failed to activate service 'org.freedesktop.systemd1'

Been trying to understand and play around with systemd-nspawn because I'd like to run a Debian Testing install for myself without enabling the testing repos on my main Debian stable system. I wrote ...
mrjpaxton's user avatar
0 votes
0 answers
654 views

How can I mount a cifs share as a volume from a rootless podman container?

Say I create a named volume podman volume create --opt type=cifs --opt o=async --opt device=//mynas.lan/steamcache steamcache According to podman volume inspect, this volume's mountpoint is /home/me/....
Krateng's user avatar
  • 143
2 votes
0 answers
150 views

Can I restrict a process' access to the filesystem using `systemd-run --user`?

I am looking for a way to run a process with limited privileges and limited access to the filesystem. I was hoping to use systemd-run to do this, which works perfectly when run as root: $ sudo ...
Clément's user avatar
  • 572
2 votes
1 answer
1k views

Image in use by seemingly non-existent container

I've got Podman 3.4.4 running on Ubuntu 22.04 and see an obsolete image listed in podman images: <none> <none> fa715d6fb372 6 days ago 585 MB I ran podman rmi fa715d6fb372 ...
Daniel Walker's user avatar
4 votes
1 answer
232 views

Are any large-scale services based on NixOS or Guix System?

Following the permeation of virtualization and containerization through world of network services, various tools and systems have emerged for provisioning and orchestrating such systems from ...
brainchild's user avatar
1 vote
0 answers
562 views

Copy from Docker to the host

I'm newbie in docker world. I have a docker inside a Virtualbox image, and I want to copy files to the host. I tried as it is written here, and on many sites: https://linuxhandbook.com/cp-command/ me@...
Alma Korte's user avatar
0 votes
1 answer
573 views

How to resolve /etc/mtab symlink permission error when using podman additional image store?

Summary: I am attempting to use additional image stores with podman on an Ubuntu server, but I am experiencing permissions issues. The shared image does show up when running podman images. When I try ...
user10108's user avatar

1
2 3 4 5
8