aboutsummaryrefslogtreecommitdiff
path: root/personal_infra/podman.md
blob: 703b6edf79ca4a6c9b6e2e8dea5c3883f7ae5c04 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
# Podman

You can create LXC containers in Proxmox (using ZFS) that can run rootless Podman.

The [`proxmox_create_lxc`](playbooks/roles/proxmox_create_lxc/) role can create the LXC container with the necessary options with the following configuration:

```
proxmox:
...
  privileged: true
  features: fuse=1,nesting=1
  extra:
    - "lxc.mount.entry: /dev/net/tun dev/net/tun none bind,create=file"
    - "lxc.cgroup2.devices.allow: c 10:200 rwm"
```

The [`podman`](puppet/modules/podman/) Puppet module can add the necessary configuration:

```
class {'podman':
  user => 'your_username',
  storage_driver => 'zfs',
}
```

This module configures subuids/subgids, but until you reboot, you will get some warnings using Podman.