top | item 37655670

(no title)

asabil | 2 years ago

It's quite unfortunate that this article mixes up what's necessary for podman quadlets with coreOS concepts.

With quadlets, the only thing required is to drop a `.container` file in the right place and you end up with a container properly supervised by `systemd`. And this of course also supports per-user rootless containers as described in [1].

[1]: https://www.redhat.com/sysadmin/quadlet-podman

discuss

order

pcthrowaway|2 years ago

I agree, and I think the author was unfortunately using coreOS because it's uncommon for cloud providers to have coreOS images nowadays, and therefore a good opportunity for him to slip in a referral code for VULTR.

Is coreOS even maintained any more? I wouldn't expect it to be very secure if the most recent VM images were built in ~2020.

Would love another writeup just using Ubuntu or some other bog-standard Linux distro.

nine_k|2 years ago

CoreOS was acquired by Red Hat, and now "Fedora CoreOS".offers similar concepts.

Conveniently, RH also invented both Podman and systemd.

nisa|2 years ago

> With quadlets, the only thing required is to drop a `.container` file in the right place and you end up with a container properly supervised by `systemd`.

Is it? He defines a .network file in that butane config without it won't work. Not really obvious. I'm sure this has a use-case and it's nice to have but personally I'm not convinced. You can switch on user-namespaces in docker-daemon or even run docker itself rootless - I guess if you are in Redhat land and use podman anyway it's an alternative but for instance where is this thing logging into? journalctl --user? Can I use a logshipper like loki with this? Is there something like docker compose config that shows the fully rendered configuration? I personally don't see the point and it feels like overly complicated.

twic|2 years ago

It will log to wherever you configure. By default, the journal. And [0]:

> Currently, Promtail can tail logs from two sources: local log files and the systemd journal (on AMD64 machines only).

Whether it supports user services, I don't know.

[0] https://grafana.com/docs/loki/latest/send-data/promtail/

hobo_mark|2 years ago

butwhat?

> Butane (formerly the Fedora CoreOS Config Transpiler, FCCT) translates human readable Butane Configs into machine readable Ignition Configs.

igwhat? Why, WHY?!

INTPenis|2 years ago

.network is only required if you need a network, just like you define networks in docker compose for some containers to have one shared private network.

snapplebobapple|2 years ago

Is there an alpineos equivalent with systemd? I have grown to adore that os for virtual machines running docker with compose.