Предыдущая версия справа и слеваПредыдущая версияСледующая версия | Предыдущая версия |
service:docker [23.05.2025 12:55] – [Сделать сеть с другим именем, не прописывая её явно для всех сервисов] viacheslav | service:docker [23.08.2025 19:29] (текущий) – [Podman] viacheslav |
---|
</code> | </code> |
===== Полезное ===== | ===== Полезное ===== |
==== Запуск контейнера не от root ==== | ==== Запуск процесса в контейнере не от root ==== |
- [[https://americanexpress.io/do-not-run-dockerized-applications-as-root/|Don’t run Docker container processes as root]]. Santa won’t bring you any gifts if you use root. | - [[https://americanexpress.io/do-not-run-dockerized-applications-as-root/|Don’t run Docker container processes as root]]. Santa won’t bring you any gifts if you use root. |
- Use [[https://github.com/ncopa/su-exec#why-reinvent-gosu|su-exec]], [[https://github.com/tianon/gosu|gosu]], chroot, or [[https://manpages.debian.org/buster/util-linux/setpriv.1.en.html|setpriv]] to step down from root into another user inside your Docker containers. | - Use [[https://github.com/ncopa/su-exec#why-reinvent-gosu|su-exec]], [[https://github.com/tianon/gosu|gosu]], chroot, or [[https://manpages.debian.org/buster/util-linux/setpriv.1.en.html|setpriv]] to step down from root into another user inside your Docker containers. |
</code> | </code> |
https://stackoverflow.com/questions/57607381/how-do-i-change-timezone-in-a-docker-container | https://stackoverflow.com/questions/57607381/how-do-i-change-timezone-in-a-docker-container |
| |
| ====== Podman ====== |
| [[https://podman.io/docs|Документация]] |
| ===== Установка ===== |
| |
| <code bash> |
| # Установить |
| sudo apt install podman |
| # Прописать псевдоним docker, чтобы было привычно |
| echo "alias docker=podman" >> ~/.bash_aliases |
| </code> |
| |
| ===== Решение проблем ===== |
| ==== short-name did not resolve to an alias and no unqualified-search registries are defined ==== |
| <code bash> |
| podman run --rm -d -p 7080:80 --name nginx nginx:alpine |
| Error: short-name "nginx:alpine" did not resolve to an alias and no unqualified-search registries are defined in "/etc/containers/registries.conf" |
| </code> |
| Решение: |
| <code bash> |
| mkdir -p ~/.config/containers |
| echo 'unqualified-search-registries = ["docker.io"]' >> ~/.config/containers/registries.conf |
| # Системный конфиг: /etc/containers/registries.conf |
| </code> |
| |
| ===== Литература ===== |
| [[https://habr.com/ru/articles/705614/|Используем функционал Podman вместо docker-compose на примере Gitea]]\\ |
| [[https://www.youtube.com/watch?v=AGkM2jGT61Y|Managing Containers in Podman with Systemd Unit Files]] |
| |