-
Notifications
You must be signed in to change notification settings - Fork 60
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Include new podman
with quadlet
functionality
#998
Comments
I'm sure this is on someone's radar already, but I didn't find any issue for this so I thought I'd make one -- Quadlet seems like a pretty awesome addition to the container ecosystem, and would make my life (and I suspect other people's lives as well) of using CoreOS as a single-node home-server much simpler. There's discussion on integrating Quadlet into Podman itself, which would make any separate integration in CoreOS moot, but those discussions are somewhat nebulous and probably come at a higher cost (in terms of maintenance) than integration here. I'm also not sure if this is actually packaged. |
For reference, initial discussion was at https://discussion.fedoraproject.org/t/what-does-everyone-think-of-quadlet/33403. |
Yeah that would be awesome. It would also me nice to have the interface stabilize before we introduce it in FCOS so people don't break on upgrade. Would need to reach out to the devs to get a confidence level on that.
yep. definitely need it packaged first. |
I'm +1 for including quadlet as this closes a usability gap for single node / non cluster deployments by making container management with podman much easier. Also agree that we should wait until we have confidence that the interface will be relatively stable going forward. I would have preferred to not add more C code to FCOS (Rust or Go would be great here) but this should not be security critical so this would be OK. |
Would be nice to sync up with quadlet devs and podman team again on future here. @travier could you reach out? |
Clearing assignee as I'm not actively working on this |
It looks like work to port quadlet to go, and add it to podman, is on its way: containers/quadlet#41 |
This is now obsolete because it's part of the next podman release. This issue can be closed. |
Will close this out once podman with the new functionality hits FCOS. |
podman
with quadlet
functionality
containers/podman#16035 > This has been merged 🎉 So this will likely come in the next podman release (might still be a sub package). |
quadlet is now included in 4.4.0 https://github.com/containers/podman/releases/tag/v4.4.0-rc3 |
Yep. That's an |
podman 4.4.0 has been released: https://github.com/containers/podman/releases/tag/v4.4.0 |
We have to make a PR to add the |
Would be great if folks interested by this functionality would make a test for it (that includes me 🙂). |
Trying this in coreos/fedora-coreos-config#2216. |
Since Of course, we should run it through our CI to get any early feedback on it (as is already being done in coreos/fedora-coreos-config#2216). WDYT? |
Definitely agree to not fast-track this one. My PR is doing that only in order to be able to test it now. |
We only include it for Fedora CoreOS as this likely won't be included in RHCOS. Fixes: coreos/fedora-coreos-tracker#998
Now that this week's releases are out of the way I propose we go ahead and get this in It won't ship in |
The fix for this went into |
The fix for this went into |
The fix for this went into |
Please try to answer the following questions about the package you are requesting:
What, if any, are the additional dependencies on the package? (i.e. does it pull in Python, Perl, etc)
Requires
podman
andcrun
, both of which are provided in base already.What is the size of the package and its dependencies?
Unsure, though likely less that 50kB.
What problem are you trying to solve with this package? Or what functionality does the package provide?
Integrating Podman with systemd requires that either
podman generate systemd
is used (which presupposes a Podman container, isn't as configurable, and produces files that aren't intended for further editing), or that equivalent integration is done manually and in a repeated manner. Quadlet solves the issue of integration with systemd as a starting point in a much more elegant way.Can the software provided by the package be run from a container? Explain why or why not.
This is intended to be used on the base system itself, and generates service files that themselves orchestrate Podman containers.
Can the tool(s) provided by the package be helpful in debugging container runtime issues?
Likely not, though they will likely help alleviate issues with misconfigured integrations.
Can the tool(s) provided by the package be helpful in debugging networking issues?
I don't believe so.
Is it possible to layer the package onto the base OS as a day 2 operation? Explain why or why not.
It's possible, though unwieldy for such a small utility.
In the case of packages providing services and binaries, can the packaging be adjusted to just deliver binaries?
This will likely only provide a binary and related support files for systemd generators.
Can the tool(s) provided by the package be used to do things we’d rather users not be able to do in FCOS? (e.g. can it be abused as a Turing complete interpreter?)
I don't believe so.
Does the software provided by the package have a history of CVEs?
It does not, though it's a fairly young project.
The text was updated successfully, but these errors were encountered: