Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. did u know, #systemd can now run #docker images natively, kinda

did u know, #systemd can now run #docker images natively, kinda

Scheduled Pinned Locked Moved Uncategorized
systemddocker
13 Posts 10 Posters 15 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • phileas@infosec.exchangeP phileas@infosec.exchange

    did u know, #systemd can now run #docker images natively, kinda

    it's really nice

    just needs two commands:

    sudo importctl --class=machine pull-oci docker.io/library/alpine:latest alpine

    sudo systemd-nspawn -M alpine /usr/bin/env sh -l

    thank you @pid_eins, I've spent several days/weeks in the past implementing this myself with hoops calling system-nspawn with my own docker layer overlayfs/bindmounts. Really hyped replacing this with that work.

    ewjoachim@piaille.frE This user is from outside of this forum
    ewjoachim@piaille.frE This user is from outside of this forum
    ewjoachim@piaille.fr
    wrote last edited by
    #3

    @phileas @pid_eins at a very small scale, I’ve been having a blast recently deploying containers in systemd using podman and quadlets. It even has ansible support.

    1 Reply Last reply
    0
    • phileas@infosec.exchangeP phileas@infosec.exchange

      did u know, #systemd can now run #docker images natively, kinda

      it's really nice

      just needs two commands:

      sudo importctl --class=machine pull-oci docker.io/library/alpine:latest alpine

      sudo systemd-nspawn -M alpine /usr/bin/env sh -l

      thank you @pid_eins, I've spent several days/weeks in the past implementing this myself with hoops calling system-nspawn with my own docker layer overlayfs/bindmounts. Really hyped replacing this with that work.

      mattiasb@mastodon.xyzM This user is from outside of this forum
      mattiasb@mastodon.xyzM This user is from outside of this forum
      mattiasb@mastodon.xyz
      wrote last edited by
      #4

      @phileas Do you know which version this was released in?

      phileas@infosec.exchangeP 1 Reply Last reply
      0
      • mattiasb@mastodon.xyzM mattiasb@mastodon.xyz

        @phileas Do you know which version this was released in?

        phileas@infosec.exchangeP This user is from outside of this forum
        phileas@infosec.exchangeP This user is from outside of this forum
        phileas@infosec.exchange
        wrote last edited by
        #5

        @mattiasb v260

        mattiasb@mastodon.xyzM 1 Reply Last reply
        1
        0
        • R relay@relay.infosec.exchange shared this topic
        • kouhai@social.treehouse.systemsK kouhai@social.treehouse.systems

          @phileas @pid_eins oh hey, a podman killer

          rasmus91@fosstodon.orgR This user is from outside of this forum
          rasmus91@fosstodon.orgR This user is from outside of this forum
          rasmus91@fosstodon.org
          wrote last edited by
          #6

          @kouhai @phileas @pid_eins well, if all the difference you care about between docker and podman is the systemd integration, i suppose.

          1 Reply Last reply
          0
          • phileas@infosec.exchangeP phileas@infosec.exchange

            @mattiasb v260

            mattiasb@mastodon.xyzM This user is from outside of this forum
            mattiasb@mastodon.xyzM This user is from outside of this forum
            mattiasb@mastodon.xyz
            wrote last edited by
            #7

            @phileas Thanks! 🙂

            1 Reply Last reply
            0
            • phileas@infosec.exchangeP phileas@infosec.exchange

              did u know, #systemd can now run #docker images natively, kinda

              it's really nice

              just needs two commands:

              sudo importctl --class=machine pull-oci docker.io/library/alpine:latest alpine

              sudo systemd-nspawn -M alpine /usr/bin/env sh -l

              thank you @pid_eins, I've spent several days/weeks in the past implementing this myself with hoops calling system-nspawn with my own docker layer overlayfs/bindmounts. Really hyped replacing this with that work.

              makepost@mastodon.artM This user is from outside of this forum
              makepost@mastodon.artM This user is from outside of this forum
              makepost@mastodon.art
              wrote last edited by
              #8

              @phileas @pid_eins Would be cool if there were a systemd-compose counterpart

              1 Reply Last reply
              0
              • phileas@infosec.exchangeP phileas@infosec.exchange

                did u know, #systemd can now run #docker images natively, kinda

                it's really nice

                just needs two commands:

                sudo importctl --class=machine pull-oci docker.io/library/alpine:latest alpine

                sudo systemd-nspawn -M alpine /usr/bin/env sh -l

                thank you @pid_eins, I've spent several days/weeks in the past implementing this myself with hoops calling system-nspawn with my own docker layer overlayfs/bindmounts. Really hyped replacing this with that work.

                i@toot.pouyan.netI This user is from outside of this forum
                i@toot.pouyan.netI This user is from outside of this forum
                i@toot.pouyan.net
                wrote last edited by
                #9
                @phileas @pid_eins podman quadlets are also integrated with systemd. I've using them for a while an am really happy.
                1 Reply Last reply
                0
                • phileas@infosec.exchangeP phileas@infosec.exchange

                  did u know, #systemd can now run #docker images natively, kinda

                  it's really nice

                  just needs two commands:

                  sudo importctl --class=machine pull-oci docker.io/library/alpine:latest alpine

                  sudo systemd-nspawn -M alpine /usr/bin/env sh -l

                  thank you @pid_eins, I've spent several days/weeks in the past implementing this myself with hoops calling system-nspawn with my own docker layer overlayfs/bindmounts. Really hyped replacing this with that work.

                  T This user is from outside of this forum
                  T This user is from outside of this forum
                  thestroyer@mastodon.social
                  wrote last edited by
                  #10

                  @phileas @pid_eins yet another way to sandbox an application. There are so many options that I don't know what to choose for sandboxing AI agent frameworks, like Pi

                  1 Reply Last reply
                  0
                  • phileas@infosec.exchangeP phileas@infosec.exchange

                    did u know, #systemd can now run #docker images natively, kinda

                    it's really nice

                    just needs two commands:

                    sudo importctl --class=machine pull-oci docker.io/library/alpine:latest alpine

                    sudo systemd-nspawn -M alpine /usr/bin/env sh -l

                    thank you @pid_eins, I've spent several days/weeks in the past implementing this myself with hoops calling system-nspawn with my own docker layer overlayfs/bindmounts. Really hyped replacing this with that work.

                    tivasyk@awawa.clubT This user is from outside of this forum
                    tivasyk@awawa.clubT This user is from outside of this forum
                    tivasyk@awawa.club
                    wrote last edited by
                    #11

                    @phileas@infosec.exchange it's so cool it reminds me that i really should try any other init system that is not this kitchen sink and switch now 😕 i've been too lazy for too long; another delay and it may be too late 🙂

                    1 Reply Last reply
                    0
                    • phileas@infosec.exchangeP phileas@infosec.exchange

                      did u know, #systemd can now run #docker images natively, kinda

                      it's really nice

                      just needs two commands:

                      sudo importctl --class=machine pull-oci docker.io/library/alpine:latest alpine

                      sudo systemd-nspawn -M alpine /usr/bin/env sh -l

                      thank you @pid_eins, I've spent several days/weeks in the past implementing this myself with hoops calling system-nspawn with my own docker layer overlayfs/bindmounts. Really hyped replacing this with that work.

                      zvyn@chaos.socialZ This user is from outside of this forum
                      zvyn@chaos.socialZ This user is from outside of this forum
                      zvyn@chaos.social
                      wrote last edited by
                      #12

                      @phileas @pid_eins I've also heard good things about quadlet (my very linmited experience is also positive, but I only toyed around so far): https://www.redhat.com/en/blog/quadlet-podman

                      phileas@infosec.exchangeP 1 Reply Last reply
                      0
                      • zvyn@chaos.socialZ zvyn@chaos.social

                        @phileas @pid_eins I've also heard good things about quadlet (my very linmited experience is also positive, but I only toyed around so far): https://www.redhat.com/en/blog/quadlet-podman

                        phileas@infosec.exchangeP This user is from outside of this forum
                        phileas@infosec.exchangeP This user is from outside of this forum
                        phileas@infosec.exchange
                        wrote last edited by
                        #13

                        @zvyn you just have one major component less on your system, this allows a vanilla OS + the nspawn executables to provide containers. You're not dependend on another company but a well established project with long term maintenance track record.

                        1 Reply Last reply
                        1
                        0
                        Reply
                        • Reply as topic
                        Log in to reply
                        • Oldest to Newest
                        • Newest to Oldest
                        • Most Votes


                        • Login

                        • Login or register to search.
                        • First post
                          Last post
                        0
                        • Categories
                        • Recent
                        • Tags
                        • Popular
                        • World
                        • Users
                        • Groups