Questions tagged [container]
229
questions
2
votes
1
answer
23
views
systemd: what is a "non-container" system?
Regarding exit.target, man systemd.special states it is:
A special service unit for shutting down the system or user service manager. It is equivalent to poweroff.target on non-container systems, and ...
0
votes
0
answers
21
views
Add IP addresses using lineinfile
I have a container.yml file, and I need to add a lineinfile task to add the IP addresses of three hosts.
Ex:
101.101.101.10 k1
101.101.101.11 k2
101.101.101.12 k3
This is how I went on ...
- 1
0
votes
0
answers
48
views
subuid and subgid mappings not mapping the root user/group (UID/GID 0)
I'm getting started with running Docker 20.10.14 in rootless mode on Linux Mint 20 (based on Ubuntu 20.04). I've created a user named dockerd for this, UID 127 (with group dockerd, GID 139) and added ...
- 416
0
votes
1
answer
26
views
Running closed source scientific software
Suppose you are required to install a heavy scientific software like Matlab or Intel Quartus on your Linux workstation. This can become a broader enquiry, for any kind of closed source software (...
- 11
0
votes
0
answers
26
views
Unshare with overlayfs results in permission denied with su
I am trying to setup 'rootless' containers by hand, with just unshare and
mounting overlayfs. Currently, I can unpack a rootfs tarball, setup a /tmp
and /proc mount, and pivot_root/chroot into it ...
- 737
0
votes
0
answers
47
views
Exposing a systemd service to systemd-nspawn container
I have a system with a bunch of services running on them. Some tasks require the ability to stop and start these services. Given an nspawn container running on a host, is there any way whatsoever to ...
- 53
0
votes
0
answers
62
views
Why do systemd-nspawn's network namespaces not work correctly without systemd running inside the container?
I am trying to run a systemd-nspawn container without an init system and inside of a systemd-nspawn-managed network namespace. My container is a stock Fedora 35 image, and I am invoking it like so:
...
0
votes
0
answers
37
views
Build Singularity container using CentOS cloud image
I'm building a Singularity container using the standard library bootstrap agent based on a CentOS 7:
BootStrap: library
From: library://library/default/centos:7
I was wondering is it possible to use ...
- 431
0
votes
0
answers
6
views
how to run K8s pod replicas with few variable values in their conf?
I have to run some containers in K8s, more than 1 replicas for a microservice.
I'm using configmaps to load the configuration of the microservice.
There are few values that need. to be incrementally ...
- 1,603
1
vote
0
answers
50
views
Is there a way to do delta updates for container images w/o a registry?
In the context of a non-connected machine which has limited space available, is there a way to update the container image using a diff/patch mechanism?
Like you call docker pull but on a binary patch ...
- 75
0
votes
1
answer
66
views
Change Podman container IP address
I installed a mtproto proxy image with Podman. When I run it I get the error message that the 443 port is already in use. Indeed httpd is using it. I have another IP address in the same server that is ...
- 306
0
votes
0
answers
19
views
How can I best track agrs in the environment without using ps?
I am working with a customer BusyBox v1.23.2 container, trying to track args being passed in the environment. I wanted to use pslogger to show when foo is sent in the environment.
However, the ps tool ...
- 101
0
votes
1
answer
37
views
Is there any performance overhead due to android emulation on linux?
Is there any performance overhead due to android emulation on linux since android uses a linux kernel. Does it utilize the underlying kernel to achieve minimum performance overhead similar to a ...
- 11
1
vote
1
answer
130
views
Singularity build error "No such file or directory" while %files is used to copy from host into singularity image
I have the following singularity definition file:
Bootstrap: docker
From: nvcr.io/nvidia/tensorflow:21.08-tf2-py3
%files
/home/zfan/sandbox/Virgo_Algo/DevEnv/AMD/requirements.txt /tmp/...
- 145
1
vote
1
answer
31
views
Process that works on Ubuntu VM does not work on Ubuntu Docker Image
Basically, I'm installing a python package w/ pip that when run, will search the home directory for a config file and use the information on it to generate and send logs.
I have this set up and ...
- 11
0
votes
0
answers
8
views
Grafana Network IN 4 times requestes in 2 min
I have a Docker container that keep restarting when certainl level network requests arrives. The host is on Azure. The cpu and memory are under the limits defined in the docker-compose every time it ...
0
votes
0
answers
425
views
dmesg: read kernel buffer failed: Permission denied with root user in LXC container after Ubuntu upgrade
I had an LXC container running in Proxmox with Ubuntu 21.04. In this container dmesg worked as expected with a root user.
I used do-release-upgrade and successfully upgraded the LXC container to ...
- 101
0
votes
0
answers
745
views
docker-compose returning ERROR: build path either does not exist, is not accessible, or is not a valid URL. after update
around last week I updated my system (Arch Arm on raspberry pi using pacman -Syu) and after that update every time I try to run docker-compose up -d I get :
ERROR: build path /srv/http/revProxy either ...
- 1
0
votes
0
answers
21
views
Using Nsight Systems in Singularity Container
Recently, I tried to profile a multi-process application using Nsight Systems within a singularity container. The command I used within the container is “nsys profile -o SOME_DIR APP_COMMAND APP_ARGS”....
- 145
2
votes
1
answer
59
views
Why is running Linux on android via UserLAnd less performant?
Now that LinuxOnDex has been discontinued by Samsung a lot of people use UserLAnd to run Linux on their android phones instead.
On the web i read a lot that running linux via UserLAnd is not very ...
- 73
0
votes
1
answer
199
views
Rocky Linux container with systemd on MacOS
I have this question which I hope is asked in the right place, if not, feel free to guide me.
I'm developing several Ansible roles and using Molecule as a tool to test the roles against. Molecule uses ...
- 267
0
votes
1
answer
88
views
Debugging Applications Running in a Singularity Container in an IDE
I am developing algorithms within the framework of Tensorflow (custom OPs and graphs) within a Singularity container (with Ubuntu 20.04, CUDA 11.2 and the Tensorflow 2.4 library). I understand that ...
- 145
0
votes
1
answer
214
views
List containers from other users?
Is there a way to list all running podman containers on a machine, including those from other users?
Even if I log in as root, podman ps -a just lists all containers for the user, but I want to see ...
- 232
0
votes
0
answers
70
views
How `xorg` and `xinit` are affecting my displays on host and in container:
Very brief summary: Either I can launch containerized GUI apps, or I can configure my display positioning, but not both.
Part 1: i3 display configuration vs xorg display configuration. Resolved but ...
- 629
0
votes
1
answer
166
views
Unable to start ubuntu through toolbox
I just installed Fedora 35 Kinoite and am taking it for a test drive.
And, of course I am testing out the toolbox feature. Now I wanted to create & enter an Ubuntu container, it got created but ...
- 1,937
0
votes
0
answers
22
views
Singularity Container -- Conflict between "--nv" and "--writable"
I am trying to build a singularity sandbox (writable container) to run my CUDA app.
In my understanding, a container can access host CUDA utilities (such as nvidia-smi and mps) through the flag "-...
- 145
0
votes
0
answers
24
views
Failed to Build Code in Container
I have a codebase successfully built in Linux SUSE with CUDA 11.4. The same codebase failed to build as it was bound to a container (image built with singularity) with a different Linux distribution (...
- 145
0
votes
1
answer
144
views
Install browser inside LXD container and run it on host OS
I am trying to install Brave browser inside an LXD container (Voidlinux - preferably, or linuxMint), create a shortcut for that app inside my host OS and launch it as any other linux app with the ...
- 141
0
votes
0
answers
86
views
process not killed even we used kill -9 and process actually was belong to container that already removed
here is a strange behavior that show how to kill a process , but actually process not killed
example ( from rhel 7.6 server )
ps -ef | grep kafka-exporter
root 15340 19528 0 17:25 pts/0 00:00:...
- 10.9k
0
votes
1
answer
130
views
Enable GNU Fortran 7.xy on CentOS 7.9: scl command not found
I'm trying to enable GNU Fortran ver 7.xy on a CentOS 7.9 image in a Singularity container. According to various sources on the internet I need to install the following packages with yum:
yum install ...
- 431
2
votes
1
answer
111
views
How can I inspect the amount of layers in my image?
Let's say I want to inspect the amount of layers in my image, how many times the image has been modified before it came to its final form, how can I do this?
- 22.4k
0
votes
1
answer
76
views
Can an image be rolled back?
If I'm working on an image with multiple layers, is it possible to rollback to a previous layer or reset to another layer in the image's stack?
What is the podman equivalent of git reset --hard HEAD^ ...
- 22.4k
0
votes
0
answers
62
views
Podman commit and squish into prior commit (equivalent of git commit --amend for podman?)
If I want to take a container and image it, is there a way to do so and squish the resulting layer at the same time. Ideally, I would be able to merge multiple layers of the resulting image (at least ...
- 22.4k
1
vote
2
answers
47
views
Can I pull an image down from a repo and save it locally as a different name?
I can pull down an image with podman pull
podman pull alpine:3
This currently pulls the image down as,
REPOSITORY TAG IMAGE ID CREATED SIZE
docker.io/library/...
- 22.4k
0
votes
0
answers
99
views
Which parts of a (docker) container are loaded into memory?
I was wondering how containers and RAM/swap are related.
Please correct me where I am wrong in my assumptions below.
All container-related functionality that the kernel offers is always loaded into ...
- 1,842
0
votes
0
answers
87
views
LXC Debian 11 Container Launch Problem
Debian 11 stable, LXC from debian repo.
lxc-create -t download -n my-container
error
lxc-create: my-container: conf.c: write_id_mapping: 2694 Operation not permitted - Failed to write uid mapping to &...
0
votes
0
answers
28
views
Set up a container for building (or developing) an application
The short version: How do I set up a container where I can build something from source, with its code, tools, dependencies, etc. isolated from the rest of the system?
The long version: So let’s say I’...
- 171
0
votes
0
answers
34
views
Linux OpenJDK Distributions & Best Practices
There are many OpenJDK distributions available (Eclipse Temurin, Oracle OpenJDK, Semeru, etc). As mentioned here, it seems that the IcedTea project is how builds were made available for Debian based ...
- 1
1
vote
0
answers
283
views
Enabling the memory controller on cgroup v2 on fedora 34
I am trying to install kubernetes on a fedora34 machine. The preflight fails with the following error:
[ERROR SystemVerification]: missing required cgroups: memory
I have been trying to find out ...
- 191
2
votes
1
answer
311
views
Why does podman stop the container why I try to attach to it?
Just starting to learn containers so I probably have missed something / not read enough yet, but I have run into a strange behavior and am trying to understand what is happening. I tried googling but ...
- 317
1
vote
0
answers
69
views
cgroup memory usage is different from sum of memory usage of sub cgroups
The memory usage I see here:
sudo cat /sys/fs/cgroup/memory/memory.usage_in_bytes
is different the from the sum of memory usage of the sub cgroups, which I calculated by getting all the sub cgroups ...
- 11
2
votes
1
answer
115
views
Redirect single file or directory using bubblewrap
I was wondering how one would use bubblewrap (bwrap) to redirect a single directory or file on Linux, while still allowing access to all other files?
For example, if I wanted to make Firefox conform ...
- 43
2
votes
1
answer
4k
views
Podman volume mounts: When to use the :z or :Z suffix?
The Podman man pages explains for volume mounts/binds:
Labeling systems like SELinux require that proper labels are placed on volume
content mounted into a container. Without a label, the security ...
- 2,106
1
vote
1
answer
151
views
Is there a downside for running docker experimental features?
I know that Docker allows enabling experimental features on the daemon side in a rather simple way:
Add/update /etc/docker/daemon.json:
{
"experimental": true
}
And enabling experimental ...
- 347
0
votes
0
answers
153
views
Docker/Podman Selinux Udica - Rootless Container unable to mount/run from mapped entrypoint script
I like to use steamcmd as dockercontainer rootless for my serveruser. But steamcmd should normally installed with normal user under /opt/steam/steamcmd/steamcmd.sh
I created a custom steamcmd.sh which ...
- 11
1
vote
0
answers
91
views
Sar network monitoring seems inaccurate?
I've been monitoring my system using sar. I recently came across some interesting data:
These are the stats for one of my Calico network devices... it seems to spike between ~0.2 Gbps and 20 Gpbs. The ...
- 556
1
vote
0
answers
19
views
Prevent container removal if it was started with --rm
Suppose I start a container like this:
docker run --rm -it foo sh
When I'm done with it it'll be removed automatically (--rm).
Sometimes I start a container that way, customize it and perform some ...
- 1,413
1
vote
1
answer
116
views
Reset NixOS container
Nixos containers can be created declaring them in the configuration.nix. Is there way to 'reset' them, hence delete all data, and recreate the container?
- 11
0
votes
0
answers
428
views
Isolating users running containers in the same account
Multiple users are running container images on the same user account on a supercomputer ("service account"). Each container mounts a folder that contains sensitive data. One service account ...
0
votes
1
answer
50
views
lxc containers can ping host and can resolve dns internet addresses but cannot get to the internet
Debian Buster amd64
Two containers, 192.168.122.2,3 both can resolve but cannot get to the Internet
Both containers can ping / interact with the host server.
Here is what I have in iptables.
# ...
