pve-container changes now need a rebase due to the perltidy re-formatting. Tested the series using the same setup as last time. Tested the following images, exported with podman:
- docker.io/library/nginx:mainline-alpine - docker.io/library/nginx:mainline-bookworm - ghcr.io/dani-garcia/vaultwarden:1.34.1-alpine - docker.io/library/node:24-bookworm Can confirm that all of these started up correctly and are reachable/usable afterwards and that the problem with the entrypoint has been fixed. I also test with `ghcr.io/nixos/nix:latest`, which interestingly fails to start with DEBUG utils - ../src/lxc/utils.c:run_buffer:560 - Script exec /usr/share/lxcfs/lxc.mount.hook 107 lxc mount produced output: /usr/share/lxcfs/lxc.mount.hook: 15: readlink: Permission denied Not sure what is going on there, but I don't think it's directly related to this series, rather just some OCI/Nix weirdness. On Wed Jun 11, 2025 at 4:48 PM CEST, Filip Schauer wrote: > Add basic support for OCI (Open Container Initiative) images [0] as > container templates. > > An OCI image can be for example obtained from Docker Hub: > > Either using Docker: > > ``` > $ docker pull httpd > $ docker save httpd > httpd.tar > ``` > > Or using Podman: > When using Podman, the format needs to be explicitly specified, > otherwise it defaults to docker-archive. > > ``` > $ podman pull httpd > $ podman save --format=oci-archive httpd > httpd.tar > ``` > > The tarball can be uploaded to a storage as a container template and > then used during container creation. It is automatically detected that > the container template is an OCI image. The resulting container still > uses the existing LXC framework. Needs to documented in pve-docs too, this paragraph would already make a great start tbh. > [..] > # Build & install order: > > OCI image support: > 1. proxmox > 2. proxmox-perl-rs > 3. pve-container > > .tar container template support: > 1. pve-storage > 2. pve-manager Should be mentioned here (and ideally, on the respective pve-container patch(es) as well) that pve-container depends on libpve-rs-perl after this series, i.e. an appropriate entry needs to be added to d/control. > > [0] https://github.com/opencontainers/image-spec/blob/main/spec.md > [1] > https://lore.proxmox.com/pve-devel/20250606103719.533030-2-c.he...@proxmox.com/ > > Changed since v1: > * Fix entrypoint command missing Cmd > * Set lxc.signal.halt according to StopSignal (Fixes container shutdown) > * setup: Ensure that both /etc/systemd/network and > /etc/systemd/system-preset exist before writing files into them. > * ui: storage upload: accept *.tar files as vztmpl > * proxmox-perl-rs: rebase on latest master (3d9806cb3c7f) > * proxmox-perl-rs: add new dependencies to debian/control > * proxmox-oci: refactor errors and use `thiserror` to avoid boilerplate Please also mention changes in the notes of each patch - makes reviewing a lot easier! _______________________________________________ pve-devel mailing list pve-devel@lists.proxmox.com https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel
