Comments (6)
AkihiroSuda
commented on June 1, 2024
workaround #31: create ~/.local/share/usernetes/_etc_containers/policy.json on the first boot and bind-mount ~/.local/share/usernetes/_etc_containers/ on /etc/containers
Could you modify rootless crio (and podman/skopeo perhaps) to use ~/.config/containers instead of /etc/containers?
Also, it would be great if crio can generate default policy.json automatically.
from usernetes.
giuseppe
commented on June 1, 2024
I've opened a patch for podman: containers/podman#1336
Going to take a look at the CRI-O side now
from usernetes.
AkihiroSuda
commented on June 1, 2024
thanks!
from usernetes.
giuseppe
commented on June 1, 2024
@AkihiroSuda should be enough to override this setting crio --signature-policy=.. What do you think?
from usernetes.
AkihiroSuda
commented on June 1, 2024
Yes, probably it is ok for now
from usernetes.
giuseppe
commented on June 1, 2024
I'll prepare a PR soon
from usernetes.
Related Issues (20)
- Network connection failed from external network to slirp network HOT 2
- services don't start after reboot node automatically HOT 1
- Question: support for multiple hosts? HOT 83
- Retain Source IP of incoming connections
- Rely on Rootless Docker/Podman/nerdctl for simplifying multi-host cluster setup (similar to `kind` and minikube KIC but for multi-host) HOT 1
- `WARN[0000] The "U7S_NODE_NAME" variable is not set. Defaulting to a blank string. `
- Unfork `kube-flannel.yaml`
- CI: test `DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER=slirp4netns`
- Remove `ip addr add "${U7S_HOST_IP}" dev eth0` HOT 4
- kube-apiserver port forwarding for "rootful" Docker seems broken, possibly due to `ip addr add "${U7S_HOST_IP}" dev eth0`
- `make kubeadm-join` shouldn't print token to the console
- VXLAN doesn't seem to work on GCP (while works on AWS and Azure); probably related to MTU HOT 21
- wip: usernetes in lima HOT 8
- Duplicated kubernetes images HOT 2
- Exiting early? HOT 1
- Issue pulling image with insufficient sub/guids HOT 6
- Unable to create pods with Usernetes v2 HOT 1
- Warning from kubeadm preflight about sandbox image
- CI: podman: ` Error: unable to start container "e778f1f314507a145dd44742a17de462ccf451d9a07033809aa5d7bb919f8f72": container create failed (no logs from conmon): conmon bytes "": readObjectStart: expect { or n, but found , error found in #0 byte of ...||..., bigger context ...||...` HOT 1
- Exposing pod service with Ingress HOT 7
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from usernetes.