First make sure to enable the Podman socket:
systemctl enable --now podman.socket
Run the Portainer agent in a Podman root environment:
podman run -d --privileged \
-p 9001:9001 \| resource "aws_vpc" "default" { | |
| cidr_block = "10.0.0.0/16" | |
| enable_dns_hostnames = true | |
| } | |
| resource "aws_internet_gateway" "gw" { | |
| vpc_id = aws_vpc.default.id | |
| } | |
| resource "aws_subnet" "tf_test_subnet" { |
| curl https://bootstrap.pypa.io/get-pip.py -o get-pip.py | |
| python3 get-pip.py --force-reinstall |
The next component to look at is the system-wide registries configuration file. On my system, that file resides at /etc/containers/registries.conf. And I will show a somewhat redacted version of mine as an example:
# This is a system-wide configuration file used to
# keep track of registries for various container backends.
# It adheres to TOML format and does not support recursive
# lists of registries.
[registries.search]
registries = ['docker.io', 'registry.fedoraproject.org', 'registry.access.redhat.com']
| #include <stdarg.h> | |
| // END - Error and Die | |
| void end(const char *fmt, ...) { | |
| va_list ap; | |
| va_start(ap, fmt); | |
| vfprintf(stdout, fmt, ap); | |
| fprintf(stdout, "\n"); | |
| fflsuh(stdout); | |
| va_end(ap); |
| [kubernetes] | |
| name=Kubernetes | |
| baseurl=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/ | |
| enabled=1 | |
| gpgcheck=1 | |
| gpgkey=https://pkgs.k8s.io/core:/stable:/v1.28/rpm/repodata/repomd.xml.key |
| podman run -it --rm -v /var/data:/sqm --security-opt label=disable docker.io/library/alpine sh | |
| # OR | |
| podman run -it --rm -v /var/data:/sqm:z docker.io/library/alpine sh # secure way |
| { | |
| "Version": "2012-10-17", | |
| "Statement": [ | |
| { | |
| "Sid": "PublicReadGetObject", | |
| "Effect": "Allow", | |
| "Principal": "*", | |
| "Action": [ | |
| "s3:GetObject" | |
| ], |