Find a file
Giuseppe Scrivano 0ddb42b4f7 spec: bind mount /sys only for rootless containers
root can always mount a new instance.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>

Closes: #1279
Approved by: rhatdan
2018-08-15 15:30:15 +00:00
.copr Test regressions against the RPM spec file 2018-08-07 20:23:53 +00:00
.github Update issue template to point build bugs at buildah 2018-07-24 16:11:28 +00:00
.tool packagers need the varlink generated file 2018-04-24 19:13:45 +00:00
cmd/podman build, rootless: specify IsolationOCIRootless 2018-08-15 11:40:30 +00:00
cni docs: fix contrib/cni broken link 2018-05-14 13:30:39 +00:00
completions/bash Added ps --pod option 2018-08-02 20:39:06 +00:00
contrib Add create and pull commands 2018-08-14 18:25:51 +00:00
docs add podman pod inspect 2018-08-09 11:06:32 +00:00
hack AppArmor: runtime check if it's enabled on the host 2018-07-23 18:11:09 +00:00
libpod Updated pod_api to reflect function spec 2018-08-14 21:49:33 +00:00
logo Touch up logo links 2018-05-15 17:35:11 +00:00
pkg spec: bind mount /sys only for rootless containers 2018-08-15 15:30:15 +00:00
test Fix handling of hostname in --net=host 2018-08-15 11:38:18 +00:00
utils Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
vendor build, rootless: specify IsolationOCIRootless 2018-08-15 11:40:30 +00:00
version Bump to v0.8.3-dev 2018-08-11 15:14:52 -04:00
.gitignore Improve ps handling of container start/stop time 2018-08-08 12:37:51 +00:00
.papr.sh test/e2e/run_userns_test.go: new file 2018-05-04 17:15:55 +00:00
.papr.yml Test regressions against the RPM spec file 2018-08-07 20:23:53 +00:00
.papr_prepare.sh Fix papr tests by forcing cgroupfs in CI 2018-08-14 01:10:46 +00:00
.travis.yml Add missing dependencies to build system 2018-08-05 11:06:18 +00:00
API.md Rename varlink socket and interface 2018-08-06 14:49:11 +00:00
changelog.txt Bump to v0.8.2.1 2018-08-11 15:14:51 -04:00
code-of-conduct.md Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
commands.md add podman pod inspect 2018-08-09 11:06:32 +00:00
CONTRIBUTING.md Add pointers for Integration Tests to docs 2018-06-06 18:45:57 +00:00
crio-umount.conf Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
docker Fix up docker compatibility messages 2018-07-27 13:40:56 +00:00
Dockerfile Add FFJSON to build container 2018-08-09 19:49:32 +00:00
Dockerfile.CentOS Add FFJSON to build container 2018-08-09 19:49:32 +00:00
Dockerfile.Fedora Add FFJSON to build container 2018-08-09 19:49:32 +00:00
install.md Add information about the configuration files to the install docs 2018-06-22 18:59:58 +00:00
libpod.conf Swap default CGroup manager to systemd 2018-08-10 14:09:46 -04:00
LICENSE Initial commit 2017-11-01 11:01:27 -04:00
Makefile Bump gitvalidation epoch 2018-08-11 15:14:53 -04:00
OWNERS Update OWNERS file to be based on reality 2018-06-04 22:10:30 +00:00
README.md Add Troubleshooting guide 2018-05-17 17:48:51 +00:00
seccomp.json Initial checkin from CRI-O repo 2017-11-01 11:24:59 -04:00
transfer.md Update transfer.md 2018-07-18 10:33:03 -04:00
troubleshooting.md troubleshooting: Add console syntax highlighting 2018-05-18 00:11:10 +00:00
Vagrantfile Enhancements to papr tests 2017-11-17 02:07:18 +00:00
vendor.conf vendor: update buildah version 2018-08-15 11:40:30 +00:00

PODMAN logo

libpod - library for running OCI-based containers in Pods

Status: Active Development

What is the scope of this project?

libpod provides a library for applications looking to use the Container Pod concept popularized by Kubernetes. libpod also contains a tool called podman for managing Pods, Containers, and Container Images.

At a high level, the scope of libpod and podman is the following:

  • Support multiple image formats including the existing Docker/OCI image formats.
  • Support for multiple means to download images including trust & image verification.
  • Container image management (managing image layers, overlay filesystems, etc).
  • Full management of container lifecycle
  • Support for pods to manage groups of containers together
  • Resource isolation of containers and pods.

What is not in scope for this project?

  • Signing and pushing images to various image storages. See Skopeo.
  • Container Runtimes daemons for working with Kubernetes CRIs. See CRI-O. We are working to integrate libpod into CRI-O to share containers and backend code with Podman.

OCI Projects Plans

The plan is to use OCI projects and best of breed libraries for different aspects:

  • Runtime: runc (or any OCI compliant runtime) and oci runtime tools to generate the spec
  • Images: Image management using containers/image
  • Storage: Container and image storage is managed by containers/storage
  • Networking: Networking support through use of CNI
  • Builds: Builds are supported via Buildah.
  • Conmon: Conmon is a tool for monitoring OCI runtimes. It is part of the CRI-O package

Podman Information for Developers

Installation notes Information on how to install Podman in your environment.

OCI Hooks Support Information on how Podman configures OCI Hooks to run when launching a container.

Podman API Documentation on the Podman API using Varlink.

Podman Commands A list of the Podman commands with links to their man pages and in many cases videos showing the commands in use.

Podman Troubleshooting Guide A list of common issues and solutions for Podman.

Podman Usage Transfer Useful information for ops and dev transfer as it relates to infrastructure that utilizes Podman. This page includes tables showing Docker commands and their Podman equivalent commands.

Tutorials Tutorials on using Podman.

Contributing Information about contributing to this project.

Current Roadmap

  1. Varlink API for Podman
  2. Integrate libpod into CRI-O to replace its existing container management backend
  3. Pod commands for Podman
  4. Rootless containers
  5. Support for cleaning up containers via post-run hooks