Re: [atomic-devel] ENV container oci

On 04/13/2017 09:21 AM, Frantisek Kluknavsky wrote: > Hi, > > what is currently the recommended way for a process to know it runs in a > container? > > RHEL-based containers define $container environment variable with a > value 'docker'. Since this is both legally problematic and factually > often

Re: [atomic-devel] Storage for system containers

On 04/24/2017 01:56 PM, Dusty Mabe wrote: NOTE: please reply-all when responding to this message In Fedora Atomic Host if we use system containers as advertised we end up using `atomic pull --storage ostree` which by default throws images into /var/lib/containers/atomic/. This is on the root fi

Re: [atomic-devel] Storage for system containers

If we move the link under /var/lib/containers/docker then removing this would not affect /var/lib/containers/ostree or /var/lib/containers/storage On 04/24/2017 11:57 PM, Ben Breard wrote: The only issue I have with using the same location is that when troubleshooting, it's fairly common to wi

Re: [atomic-devel] Storage for system containers

Also rm -rf /var/lib/docker in a devicemapper world is not a good idea. You end up in a strange world which could leak devices and resources. atomic storage reset Is the preferred way. On 04/24/2017 11:57 PM, Ben Breard wrote: The only issue I have with using the same location is that when tr

[atomic-devel] Moving to atomic-workstation

I decided to try out Atomic Workstation as default laptop, and it is very interesting. Setting up containers to install normal workflow. Trying out LibreOffice Flatpack, very cool. If you get a chance try it out.

Re: [atomic-devel] Storage for system containers

On 04/25/2017 03:44 PM, Josh Berkus wrote: On 04/25/2017 12:08 PM, Dusty Mabe wrote: On 04/25/2017 08:25 AM, Daniel Walsh wrote: On 04/24/2017 01:56 PM, Dusty Mabe wrote: Perhaps we should just mount a partition at /var or move /var/lib/docker to /var/lib/containers/docker and make a symbolic

Re: [atomic-devel] Many new dependencies in f25 updates-testing

On 04/26/2017 01:12 PM, Colin Walters wrote: On Wed, Apr 26, 2017, at 12:57 PM, Jonathan Lebon wrote: I traced it down to: http://pkgs.fedoraproject.org/cgit/rpms/atomic.git/commit/?h=f25&id=7d15e4a0be2db29deda4b92a039a041d81bbe205 http://pkgs.fedoraproject.org/cgit/rpms/atomic.git/commit/?h=f

Re: [atomic-devel] Storage for system containers

On 04/27/2017 06:44 AM, Giuseppe Scrivano wrote: Daniel Walsh writes: On 04/24/2017 01:56 PM, Dusty Mabe wrote: NOTE: please reply-all when responding to this message In Fedora Atomic Host if we use system containers as advertised we end up using `atomic pull --storage ostree` which by

Re: [atomic-devel] Announcing CRI-O 0.3

On 04/28/2017 12:42 PM, Mrunal Patel wrote: We are happy to announce the release of CRI-O v0.3 . With this release, we are passing all the k8s node conformance tests. Big thanks to our maintainers and contributors from Red Hat,

Re: [atomic-devel] Storage for system containers

On 04/28/2017 01:09 PM, Giuseppe Scrivano wrote: Hi, Dusty Mabe writes: i'm going to show how little I know with this question, but would it be possible to have a separate partition for system containers that was essentially xfs + an overlayfs of the host filesystem? yes we could do that, we

Re: [atomic-devel] looking for feedback on running kubernetes in system containers

If these config changes should be in the standard etcd/flanneld containers please open pull requests to fix this on github.com:projectatomic/atomic-system-containers On 04/28/2017 03:08 PM, Jason Brooks wrote: On Fri, Apr 28, 2017 at 1:05 AM, Spyros Trigazis wrote: Hi, So far, I have only t

[atomic-devel] How do we get packages into Debian

We have been placing a bunch of repositories onto Projectatomic.io and these projects are being built into packages for Fedora and sometime RHEL/Centos. Does anyone know if any have been built into Debian/Ubuntu? If not how do we get them built for the Debian based distros? How do we encourage p

Re: [atomic-devel] Openshift Origin + CRI-O

On 05/10/2017 10:37 AM, Antonio Murdaca wrote: On May 10, 2017 16:32, "Colin Walters" > wrote: On Wed, May 10, 2017, at 10:08 AM, Antonio Murdaca wrote: > I've started working on the integration between Openshift Origin and > CRI-O some time ago with ni

Re: [atomic-devel] Having abrt on Atomic Host

On 05/19/2017 01:46 AM, Niranjan M.R wrote: Greetings, I would like to know what is the status of having Abrt on Atomic Host. I see there was a old thread[1], but could not figure out if there was any work being done in that regard. I have 2 use cases here A. Having abrt collect crashes from

Re: [atomic-devel] Having abrt on Atomic Host

On 05/29/2017 11:57 PM, Dusty Mabe wrote: On 05/29/2017 08:20 PM, William Brown wrote: On Wed, 2017-05-24 at 11:44 -0400, Daniel Walsh wrote: On 05/19/2017 01:46 AM, Niranjan M.R wrote: Greetings, I would like to know what is the status of having Abrt on Atomic Host. I see there was a old

Re: [atomic-devel] Having abrt on Atomic Host

On 05/30/2017 06:29 AM, Daniel Walsh wrote: On 05/29/2017 11:57 PM, Dusty Mabe wrote: On 05/29/2017 08:20 PM, William Brown wrote: On Wed, 2017-05-24 at 11:44 -0400, Daniel Walsh wrote: On 05/19/2017 01:46 AM, Niranjan M.R wrote: Greetings, I would like to know what is the status of having

Re: [atomic-devel] Thinking about CRI-O and Docker on Atomic Host

On 06/01/2017 01:19 PM, Antonio Murdaca wrote: On Jun 1, 2017 17:58, "Colin Walters" > wrote: I've seen some interesting work on CRI-O for Kube/OpenShift. But I'm wondering about what people are thinking the future of docker.service and /usr/bin/docker i

Re: [atomic-devel] Having abrt on Atomic Host

On 06/01/2017 10:45 PM, Niranjan M.R wrote: On 05/30/2017 09:27 AM, Dusty Mabe wrote: On 05/29/2017 08:20 PM, William Brown wrote: On Wed, 2017-05-24 at 11:44 -0400, Daniel Walsh wrote: On 05/19/2017 01:46 AM, Niranjan M.R wrote: Greetings, I would like to know what is the status of having

Re: [atomic-devel] Packages added/removed from F25AH -> F26AH

On 06/05/2017 11:37 AM, Dusty Mabe wrote: Please reply-all when responding to this mail. I've been doing some F25->F26 exploration and notice there are quite a few packages added and removed between F25 and F26. Let's go through these and make sure each addition/removal makes sense. You can mos

[atomic-devel] New blog on CRI-O and Kubernetes, Please social media this.

http://www.projectatomic.io/blog/2017/06/6-reasons-why-cri-o-is-the-best-runtime-for-kubernetes/

Re: [atomic-devel] Shutting down ask.projectatomic.io, moving to StackExchange, needs your help

On 06/13/2017 01:59 PM, Josh Berkus wrote: One more thing: Does anyone have over 1500 reputation on StackOverflow? We want to create some tags. How does one follow this? Is there a way to setup a notification if anyone mentions keywords?

Re: [atomic-devel] Shutting down ask.projectatomic.io, moving to StackExchange, needs your help

On 06/14/2017 10:31 AM, Matthew Miller wrote: On Wed, Jun 14, 2017 at 02:14:05PM +, Joe Brockmeier wrote: create some tags. How does one follow this? Is there a way to setup a notification if anyone mentions keywords? No way that I know of, unfortunately. Not keywords, but you can subscr

[atomic-devel] New SELinux/Container Blog

http://danwalsh.livejournal.com/76358.html Please social Media it.

Re: [atomic-devel] New SELinux/Container Blog

On 06/20/2017 03:50 PM, Jeff Ligon wrote: Looks like crap on a phone. Is that livejournal? Yes.

Re: [atomic-devel] Announcing CRI-O 1.0.0-alpha.0

On 06/20/2017 06:49 PM, Mrunal Patel wrote: We are happy to announce the release of CRI-O v1.0.0.alpha . With this release, we are passing all the k8s e2e tests. Big thanks to our maintainers and contributors from Red

[atomic-devel] New Blog on Buildah

Buildah is a command line tool that can be used to build container images without requiring the docker daemon. Supports Dockerfile format as well as simple bash scripting. http://www.projectatomic.io/blog/2017/06/introducing-buildah

Re: [atomic-devel] Upcoming Events: call for speakers/staff plus funding & swag

On 06/29/2017 06:19 PM, Josh Berkus wrote: Folks: The following events are important to us for promoting Atomic Host, Cockpit, and other technologies. I am looking for speakers, booth staff, and other participants. Both travel funding and assistance with proposals and talks is available for al

Re: [atomic-devel] cri-o, buildah and skopeo packages available via Ubuntu PPA and CentOS Virt SIG

Remember you can't run SELinux and Overlay at the same time on RHEL/CENTOS until 7.4 kernel is released. On 07/05/2017 04:45 PM, Mrunal Patel wrote: cc'ed Nalin On Wed, Jul 5, 2017 at 1:06 PM, Clayton Coleman > wrote: Hrm, maybe when: CGroup: /system.sl

[atomic-devel] Wrote a new blog for OpenSource.Com on evolution of containers.

https://opensource.com/article/17/7/how-linux-containers-evolved If you like it, please social Media this message out.

Re: [atomic-devel] SELinux and romana add-on: need advice for romana devs on correct labels

On 07/10/2017 04:25 AM, ascanio.al...@gmail.com wrote: Ooops - that should read "Currently it does not work with SELinux: it installs a host mount from /var/lib/romana inside the pod without a transition." romana devs ask: "adding those three lines (to) romana-services and romana-agent would f

[atomic-devel] New CRI-O blogging site just went up.

https://medium.com/cri-o

Re: [atomic-devel] [aos-devel] Announcing CRI-O 1.0.0-beta.0

On 08/03/2017 10:05 AM, Mrunal Patel wrote: We are happy to announce the release of CRI-O v1.0.0.beta.0 . With this release, we added support for OCI 1.0 specifications. Big thanks to our maintainers and contributors fro

Re: [atomic-devel] Announcing CRI-O 1.0.0-beta.0

On 08/03/2017 10:05 AM, Mrunal Patel wrote: We are happy to announce the release of CRI-O v1.0.0.beta.0 . With this release, we added support for OCI 1.0 specifications. Big thanks to our maintainers and contributors fro

[atomic-devel] Buildah is all about getting your container images fit.

New Blog on some interesting advantages of using Buildah to build container images. http://www.projectatomic.io/blog/2017/08/buildah-getting-fit/ Please Social Media this.

Re: [atomic-devel] Lunch on Thursday for team meeting during Flock?

On 08/21/2017 08:16 PM, Josh Berkus wrote: Folks, Since pretty much no evenings are available, could folks meet up durning Thursday Lunch to do an Atomic WG meeting/discussion? SGTM

Re: [atomic-devel] Can anyone do DevOpsDays Boston?

On 09/06/2017 05:16 PM, Josh Berkus wrote: This is kinda last-minute, but I'm hoping some folks in the Boston area might be interested in proposing an Open Spaces session on Atomic, new container tools, or other of our projects at DevOpsDays Boston. If you're interested in going, I can cover you

Re: [atomic-devel] Who got accepted to Kubecon?

On 09/28/2017 10:29 AM, Josh Berkus wrote: Folks: - who got a talk accepted to KubeCon US? Mrunal got CRI-O Talk accepted. - who didn't get a talk accepted but wants to go anyway? I got rejected. But I plan on going and presenting at openshift commons. Let me know, I need to figure out pass

Re: [atomic-devel] tools and systemtap containers are available in Fedora

On 10/05/2017 01:00 PM, Frank Ch. Eigler wrote: wcohen forwarded: [...] [root@dhcp23-91 ~]# atomic run --spc candidate-registry.fedoraproject.org/f26/systemtap docker run --cap-add SYS_MODULE -v /sys/kernel/debug:/sys/kernel

Re: [atomic-devel] tools and systemtap containers are available in Fedora

On 10/05/2017 01:11 PM, Frank Ch. Eigler wrote: Hi, Dan - [...] Rather then putting the system into permissive mode, you should run a privileged container "atomic run --spc " fails similarly on f26, despite its underlying "docker run --cap-add SYS_MODULE ..." parts. or at least disable S

Re: [atomic-devel] tools and systemtap containers are available in Fedora

On 10/05/2017 01:18 PM, Jeremy Eder wrote: setenforce 0 works...security-opt label:disable does not. On Thu, Oct 5, 2017 at 1:06 PM, Daniel Walsh <mailto:dwa...@redhat.com>> wrote: On 10/05/2017 01:00 PM, Frank Ch. Eigler wrote: wcohen

Re: [atomic-devel] tools and systemtap containers are available in Fedora

2017 at 1:25 PM, Daniel Walsh <mailto:dwa...@redhat.com>> wrote: On 10/05/2017 01:18 PM, Jeremy Eder wrote: setenforce 0 works...security-opt label:disable does not. On Thu, Oct 5, 2017 at 1:06 PM, Daniel Walsh mailto:dwa...@redhat.com>> wrote: On 10/05/2017 0

Re: [atomic-devel] tools and systemtap containers are available in Fedora

On 10/05/2017 01:47 PM, Frank Ch. Eigler wrote: Hi, Dan - Could you show the docker line that atomic run is executing? % atomic run --spc candidate-registry.fedoraproject.org/f26/systemtap /usr/share/systemtap/examples/io/iotop.stp docker run --cap-add SYS_MODULE -v /sys/kernel/debug:/sys/ke

Re: [atomic-devel] tools and systemtap containers are available in Fedora

On 10/05/2017 01:55 PM, Frank Ch. Eigler wrote: Hi, Dan - On Thu, Oct 05, 2017 at 01:49:48PM -0400, Daniel Walsh wrote: [...] But really for something like this, it would be better to just run it --privileged. There is [no] security confinement present in what you are doing. Yup. I thought

Re: [atomic-devel] tools and systemtap containers are available in Fedora

On 10/06/2017 10:14 AM, Mark Wielaard wrote: On Mon, 2017-09-18 at 16:48 +0200, Tomas Tomecek wrote: we managed to move tools container from Fedora Dockerfiles github repo to Fedora infra [1]. As a side effects, we put systemtap in a dedicated container. We would very much appreciate your feedb

[atomic-devel] Creating a new repo called libpod.

Basically we are looking to move kpod out of the kubernetes-incubator/cri-o project to allow it to grow on its own. We plan on building out the library for creating container pods to such an extent that CRI-O could use it as well as kpod. Since kpod is outgrowing the original goals of the CRI

Re: [atomic-devel] Creating a new repo called libpod.

On 11/01/2017 11:25 AM, Dusty Mabe wrote: On 11/01/2017 11:17 AM, Daniel Walsh wrote: Basically we are looking to move kpod out of the kubernetes-incubator/cri-o project to allow it to grow on its own. We plan on building out the library for creating container pods to such an extent that CRI

[atomic-devel] New blog on CRI-O support for Kubernetes

https://medium.com/cri-o/cri-o-support-for-kubernetes-4934830eb98e

Re: [atomic-devel] Docker version updates planned?

On 12/13/2017 01:51 PM, Richard Alloway wrote: Hi! I've been taking a look at Atomic OS in my "free" time and have noticed that it is shipped with Docker 1.12.x and/or 1.13.x. Those branches appear to be deprecated. Are there any plans to move to the 17.x.x series (Docker CE/EE)? Thanks! -

Re: [atomic-devel] atomic pull from containers-storage

On 02/01/2018 04:36 AM, Thorsten Scherf wrote: On Thu, Feb 1, 2018 at 5:16 AM, Chris Negus wrote: - Original Message - HI, there was already a similar request on the list before for which I have a follow-up question. Let's say I have an image created by buildah and the the image has

Re: [atomic-devel] Atomic BOF at RH Summit

On 02/15/2018 05:43 PM, Josh Berkus wrote: Folks, An Atomic BOF session has been confirmed for RH Summit in May. I will be organizing it since Sanja won't be at this year's Summit. Who will be at RH Summit? I'd like 4-6 people to talk about various Atomic projects before we take questions. I

Re: [atomic-devel] Proposing moving https://github.com/stefwalter/oci-kvm-hook into projectatomic

On 02/16/2018 02:23 PM, Colin Walters wrote: Hi, In working on our CI (and just locally in containers in general), I find https://github.com/stefwalter/oci-kvm-hook to be very, very useful. Yes, there are other ways one can do it; see the thread in https://github.com/stefwalter/oci-kvm-hook/iss

Re: [atomic-devel] Proposing moving https://github.com/stefwalter/oci-kvm-hook into projectatomic

On 02/16/2018 02:33 PM, Colin Walters wrote: On Fri, Feb 16, 2018, at 2:29 PM, Daniel Walsh wrote: Does this actually work? Yes =) For example it broke and we fixed it e.g.: https://github.com/stefwalter/oci-kvm-hook/pull/4 I would figure the device cgroup would prevent use of the kvm

[atomic-devel] Podman-0.4.4 was just releeased.

This version no longer  requires the Buildah package to be installed but can still do podman builds.  It is 36 Mb in size and I believe should now be considered for inclusion into the atomic host by default as a container runtime.

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

On 06/01/2018 10:58 AM, arnaud gaboury wrote: I am switching from fedora server to Atomic. In the old world, my "/etc/sysconfig/docker" file had the content: OPTIONS="--selinux-enable" Now, after running the script container-storage-setup to create a thin pool volume, the file with options is n

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

On 06/01/2018 12:07 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 5:04 PM Daniel Walsh <mailto:dwa...@redhat.com>> wrote: On 06/01/2018 10:58 AM, arnaud gaboury wrote: > I am switching from fedora server to Atomic. > > In the old world, my "/etc/sys

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

On 06/01/2018 12:33 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 6:25 PM arnaud gaboury mailto:arnaud.gabo...@gmail.com>> wrote: On Fri, Jun 1, 2018 at 6:19 PM Daniel Walsh mailto:dwa...@redhat.com>> wrote: On 06/01/2018 12:07 PM, arnaud gaboury wrote:

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

On 06/01/2018 01:08 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 6:53 PM Daniel Walsh <mailto:dwa...@redhat.com>> wrote: On 06/01/2018 12:33 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 6:25 PM arnaud gaboury mailto:arnaud.gabo...@gmail.com>> wrote:

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

On 06/01/2018 01:44 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 7:12 PM Daniel Walsh <mailto:dwa...@redhat.com>> wrote: On 06/01/2018 01:08 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 6:53 PM Daniel Walsh mailto:dwa...@redhat.com>> wrote: On 06/0

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

On 06/01/2018 01:52 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 7:46 PM Daniel Walsh <mailto:dwa...@redhat.com>> wrote: On 06/01/2018 01:44 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 7:12 PM Daniel Walsh mailto:dwa...@redhat.com>> wrote: On 06/0

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

On 06/01/2018 04:31 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 9:49 PM Daniel Walsh <mailto:dwa...@redhat.com>> wrote: On 06/01/2018 01:52 PM, arnaud gaboury wrote: On Fri, Jun 1, 2018 at 7:46 PM Daniel Walsh mailto:dwa...@redhat.com>> wrote: On 06/0

Re: [atomic-devel] docker optionsin /etc/sysconfig/docker

On 06/02/2018 12:29 PM, arnaud gaboury wrote: On Sat, Jun 2, 2018 at 4:21 PM Colin Walters > wrote: On Sat, Jun 2, 2018, at 8:30 AM, arnaud gaboury wrote: > >  # systemctl edit docker.service > [Service] > Execstart= > ExecStart=/usr/bin/do

Re: [atomic-devel] Install CRI-O on Atomic Host

I would figure you need it on Fedora CoreOS.  We did some experimenting with CRI-O in a system container but decided this caused too many issues. On 1/29/19 11:50 AM, Scott McCarty wrote: > Chris/Derrick, >     Have either of you ran into this? > > Best Regards > Scott M > > On Fri, Jan 25, 2019

Re: [atomic-devel] Install CRI-O on Atomic Host

for production okd.io with cri-o > as container runtime? > Standard OS's  Fedora/CentOS/RHEL. > > > > ‐‐‐ Original Message ‐‐‐ > On Tuesday, January 29, 2019 1:20 PM, Daniel Walsh > wrote: > >> I would figure you need it on Fedora CoreOS.  We did so

Re: [atomic-devel] Install CRI-O on Atomic Host

On 1/29/19 4:54 PM, mabi wrote: > Thanks Chris for the tip regarding the extra repository to add, I will try it > out. > > Now I am wondering so what does Red Hat officially recommend or support if > one wants to use OpenShift (from okd.io) with CRI-O as container runtime? > > I can't find any of

Re: [atomic-devel] Install CRI-O on Atomic Host

ntOS Atomic Host good for? > Running general container runtimes like podman and buildah.  > > > ‐‐‐ Original Message ‐‐‐ > On Tuesday, January 29, 2019 7:24 PM, Daniel Walsh > wrote: > >> On 1/29/19 12:41 PM, mabi wrote: >>> Thanks for your answer. >

Re: [atomic-devel] Install CRI-O on Atomic Host

On 1/30/19 2:02 PM, Colin Walters wrote: > > On Tue, Jan 29, 2019, at 2:31 PM, mabi wrote: >> Ah ok so standard CentOS would do it... I guess I missed the point, I >> thought Atomic Host is THE distribution to go with when using such >> platforms like okd.io/OpenShift... > An interesting topic he

Re: [atomic-devel] recommended way of running a container

On 5/2/19 10:12 AM, Farkas Levente wrote: > Hi, > I'm just read the blog about healthchecks: > > https://developers.redhat.com/blog/2019/04/18/monitoring-container-vitality-and-availability-with-podman/ > > What is the current recommended way of running a container on an atomic > host using podman?

Re: [atomic-devel] moby-engine for centos/epel

On 5/5/19 4:33 AM, Muayyad AlSadi wrote: > Hi, > > it seems that fedora had shipped moby-engine, > when can we ship it for centos/epel? > > if not in epel,link for that repo? I think this is up to a volunteer to take it on. BTW Have you tried out Podman

Re: [atomic-devel] podman user defined network support

On 5/16/19 8:26 PM, Muayyad AlSadi wrote: > rootless podman containers can create network using slirp4netns > but there is no container to container communication > > the workaround I used in podman-compose is that I share a network > between containers > and all containers talk via pod shared loca

Re: [atomic-devel] Getting to full deprecation of the projectatomic/ Github organization

On 9/27/19 7:20 PM, Colin Walters wrote: > bubblewrap moved: https://github.com/containers/bubblewrap > rpm-ostree moved: https://github.com/coreos/rpm-ostree > > Of the things remaining...probably the biggest is our docker branch: > https://github.com/projectatomic/docker > I feel like it'd be cl

Re: [atomic-devel] Getting to full deprecation of the projectatomic/ Github organization

ince this is in use on RHEL7. > On Sat, 28 Sep 2019, 07:02 Daniel Walsh, <mailto:dwa...@redhat.com>> wrote: > > On 9/27/19 7:20 PM, Colin Walters wrote: > > bubblewrap moved: https://github.com/containers/bubblewrap > > rpm-ostree moved: https://github.co

Re: [atomic-devel] Getting to full deprecation of the projectatomic/ Github organization

On 10/1/19 2:35 PM, Farkas Levente wrote: > Hi, > > It'd be very nice to get something useful information about the > current state and future plan of RH about containerization. > TL;DR is there anybody who knows anything about it? > > IMHO the current communication about containerization is a very