From Fedora Project Wiki
(Rootless and privileged modes matrix) |
(make all the cmdlines look the same) |
||
Line 12: | Line 12: | ||
podman build -t rootless-test-fcct . | podman build -t rootless-test-fcct . | ||
</pre> | </pre> | ||
<li> Try running the container, e.g. | <li> Try running the container, e.g.: | ||
<pre>podman run -ti --rm rootless-test-fcct --help</pre> | |||
<li> Now try to build the same container, using privileged `podman`: | <li> Now try to build the same container, using privileged `podman`: | ||
<pre> | <pre> | ||
Line 18: | Line 19: | ||
sudo podman build -t privileged-test-fcct . | sudo podman build -t privileged-test-fcct . | ||
</pre> | </pre> | ||
<li> Try running the container, e.g. | <li> Try running the container, e.g.: | ||
<pre>sudo podman run -ti --rm privileged-test-fcct --help</pre> | |||
<li> Now, use privileged `docker` to build the container. Note that this should be performed on a different fresh Fedora CoreOS machine since there are [https://docs.fedoraproject.org/en-US/fedora-coreos/faq/#_can_i_run_containers_via_docker_and_podman_at_the_same_time known conflicts between `podman` and `docker`]: | <li> Now, use privileged `docker` to build the container. Note that this should be performed on a different fresh Fedora CoreOS machine since there are [https://docs.fedoraproject.org/en-US/fedora-coreos/faq/#_can_i_run_containers_via_docker_and_podman_at_the_same_time known conflicts between `podman` and `docker`]: | ||
<pre> | <pre> | ||
Line 26: | Line 27: | ||
sudo docker build -t docker-fcct . | sudo docker build -t docker-fcct . | ||
</pre> | </pre> | ||
<li> Try running the container, e.g. | <li> Try running the container, e.g.: | ||
<pre>sudo docker run -ti --rm docker-fcct --help</pre> | |||
</ol> | </ol> | ||
Revision as of 13:00, 8 June 2020
Description
Install Fedora CoreOS and build and run containers.
Setup
- Have access to a (or install a new) FCOS instance running the next stream.
How to test
- Using rootless
podman
, buildfcct
from a Dockerfile, which is the tool you've used to convert FCCs to Ignition configs. To do this:git clone https://github.com/coreos/fcct /tmp/fcct cd /tmp/fcct podman build -t rootless-test-fcct .
- Try running the container, e.g.:
podman run -ti --rm rootless-test-fcct --help
- Now try to build the same container, using privileged
podman
:cd /tmp/fcct sudo podman build -t privileged-test-fcct .
- Try running the container, e.g.:
sudo podman run -ti --rm privileged-test-fcct --help
- Now, use privileged
docker
to build the container. Note that this should be performed on a different fresh Fedora CoreOS machine since there are known conflicts betweenpodman
anddocker
:git clone https://github.com/coreos/fcct cd /tmp/fcct sudo docker build -t docker-fcct .
- Try running the container, e.g.:
sudo docker run -ti --rm docker-fcct --help
Expected Results
- You can build a container using podman in rootless mode.
- You can run a built container using podman in rootless mode.
- You can build a container using podman in privileged mode.
- You can run a built container using podman in privileged mode.
- You can build a container using docker in privileged mode.
- You can run a built container using docker in privileged mode.
Optional
- If you're familiar with other containerized software, try building and running them too.