Viewing profile — rhatdan

I wrote a blog on an exciting new feature of RamaLama to allow users to take their documents (pdf, docx, md, ...) and translate them into a RAG database in a container image and th…

Bottom line we want to take advantage of the infrastructure created by Podman, Docker and Kubernetes.

One of my primary goals of RamaLama was to allow users to move AI Models into containers, so they can be stored in OCI Registries. I believe there is going to be a proliferation of…

Look for krunkit for GPU/Cuda Accelerator. Should be much better support in podman 5.2 out next month, I believe. You can use it now if you grab it from brew.

Linux containers require a Linux kernel. Any tool on a MAC that is running containers locally is doing it in a VM.

I meant registry.fedoraproject.org/fedora-bootc

Using bootc-image-builder ( https://github.com/osbuild/bootc-image-builder ) You can convert a bootc image into multiple different formats including vmdk, iso, raw, qcow2 ...

registry.redhat.io/rhel9/rhel-bootc registry.redhat.io/rhel9/rhel-bootc quay.io/centos-bootc/centos-bootc Are currently available, but since this is an open source project, we look…

There is also a fedora-bootc registry.fedoraproject.org/fedora-bootc:latest

Administrators who want to share access to a system and part of its data but control what users are able to see on the system. Think sharing special devices. Think sharing certain …

I see some misunderstanding of the goal of Podmansh. The basic idea is certain users have secure systems where they want to allow limited access to the host system. For example you…

Do you run with Docker daemon running in rootless mode? Does rancher default to rootless mode? I hear Docker can run in rootless mode but does anyone really run it that way. If I w…

Podman is a community project. Anyone can setup repos to update any distribution. Many distributions are managing versions of Podman. OpenSuse, Fedora, Centos, RHEL, Debian, Arch a…

It works in the home directory. Just place the quadlet file in $HOME/.config/containers/systemd $ systemctl --user daemon-reload $ systemctl --user start QUADLETNAME.service If you…

Sure but to me, and I am obviously biased, if I want to run a container on my system I don't want to fire up multiple daemons in my homedir and then have them sitting out there usi…

Podman can actually quite easily run host environments in containers with systemd running as PID1, giving you very similar features as LXC. Checkout `podman run --rootfs`

This is also related to the Client Server model supported by Docker versus the Fork/Exec Model supported by Podman. Podman works closely with the HPC (High Performance Computing) w…

BTW Podman now supports pasta as well as slirp4netns. I am told pasta gives you better network performance in rootless mode, although I have never tried it.

No, but you can precreate a network namespace and allow rootless Podman to join the network namespace.

Agree, I believe that the world should move to using Kubernetes YAML for running multiple container workloads. Whether you are running on a single node or in a kubernetes cluster. …

Sure, and bottom line the OS/Kernel prevent you from doing some things in rootless mode, although we are always attempting to push the boundaries on what is allowed, in a secure wa…

There have been major vulnerabilities over the years where being root allow the container to take over the system. Checkout https://www.stackrox.io/blog/the-runc-vulnerability-a-de…

Running containers without a daemon in rootful and rootless mode is better and more secure in many ways. If you want to understand all of the security features of Podman take a loo…

Most of these are issues with running rootless not necessarily with running podman. Podman in rootful mode does not have most of these issues.