I wrote a blog on an exciting new feature of RamaLama to allow users to take their documents (pdf, docx, md, ...) and translate them into a RAG database in a container image and then use it with an AI Model. With only…
Bottom line we want to take advantage of the infrastructure created by Podman, Docker and Kubernetes.
One of my primary goals of RamaLama was to allow users to move AI Models into containers, so they can be stored in OCI Registries. I believe there is going to be a proliferation of "private" models, and eventually…
Look for krunkit for GPU/Cuda Accelerator. Should be much better support in podman 5.2 out next month, I believe. You can use it now if you grab it from brew.
Linux containers require a Linux kernel. Any tool on a MAC that is running containers locally is doing it in a VM.
I meant registry.fedoraproject.org/fedora-bootc
Using bootc-image-builder (https://github.com/osbuild/bootc-image-builder) You can convert a bootc image into multiple different formats including vmdk, iso, raw, qcow2 ...
registry.redhat.io/rhel9/rhel-bootc registry.redhat.io/rhel9/rhel-bootc quay.io/centos-bootc/centos-bootc Are currently available, but since this is an open source project, we look forward to other distros creating…
There is also a fedora-bootc registry.fedoraproject.org/fedora-bootc:latest
Administrators who want to share access to a system and part of its data but control what users are able to see on the system. Think sharing special devices. Think sharing certain directory content that containers…
I see some misunderstanding of the goal of Podmansh. The basic idea is certain users have secure systems where they want to allow limited access to the host system. For example you might have some secret data on a…
Do you run with Docker daemon running in rootless mode? Does rancher default to rootless mode? I hear Docker can run in rootless mode but does anyone really run it that way. If I want to start a single container in my…
Podman is a community project. Anyone can setup repos to update any distribution. Many distributions are managing versions of Podman. OpenSuse, Fedora, Centos, RHEL, Debian, Arch all supply updates. There is also the…
It works in the home directory. Just place the quadlet file in $HOME/.config/containers/systemd $ systemctl --user daemon-reload $ systemctl --user start QUADLETNAME.service If you want this to work at boot, you need to…
Sure but to me, and I am obviously biased, if I want to run a container on my system I don't want to fire up multiple daemons in my homedir and then have them sitting out there using resources, when all I want to do is…
Podman can actually quite easily run host environments in containers with systemd running as PID1, giving you very similar features as LXC. Checkout `podman run --rootfs`
This is also related to the Client Server model supported by Docker versus the Fork/Exec Model supported by Podman. Podman works closely with the HPC (High Performance Computing) world. Checkout the article about how…
BTW Podman now supports pasta as well as slirp4netns. I am told pasta gives you better network performance in rootless mode, although I have never tried it.
No, but you can precreate a network namespace and allow rootless Podman to join the network namespace.
Agree, I believe that the world should move to using Kubernetes YAML for running multiple container workloads. Whether you are running on a single node or in a kubernetes cluster. Docker-Compose while supported by…
Sure, and bottom line the OS/Kernel prevent you from doing some things in rootless mode, although we are always attempting to push the boundaries on what is allowed, in a secure way. Rootless mode works for the great…
There have been major vulnerabilities over the years where being root allow the container to take over the system. Checkout https://www.stackrox.io/blog/the-runc-vulnerability-a-deep-d...
Running containers without a daemon in rootful and rootless mode is better and more secure in many ways. If you want to understand all of the security features of Podman take a look at chapters 10 and 11 of my book…
Most of these are issues with running rootless not necessarily with running podman. Podman in rootful mode does not have most of these issues.
BTW Podman has been ported to FreeBSD and works with jails. Although I have never tried it.
I wrote a blog on an exciting new feature of RamaLama to allow users to take their documents (pdf, docx, md, ...) and translate them into a RAG database in a container image and then use it with an AI Model. With only…
Bottom line we want to take advantage of the infrastructure created by Podman, Docker and Kubernetes.
One of my primary goals of RamaLama was to allow users to move AI Models into containers, so they can be stored in OCI Registries. I believe there is going to be a proliferation of "private" models, and eventually…
Look for krunkit for GPU/Cuda Accelerator. Should be much better support in podman 5.2 out next month, I believe. You can use it now if you grab it from brew.
Linux containers require a Linux kernel. Any tool on a MAC that is running containers locally is doing it in a VM.
I meant registry.fedoraproject.org/fedora-bootc
Using bootc-image-builder (https://github.com/osbuild/bootc-image-builder) You can convert a bootc image into multiple different formats including vmdk, iso, raw, qcow2 ...
registry.redhat.io/rhel9/rhel-bootc registry.redhat.io/rhel9/rhel-bootc quay.io/centos-bootc/centos-bootc Are currently available, but since this is an open source project, we look forward to other distros creating…
There is also a fedora-bootc registry.fedoraproject.org/fedora-bootc:latest
Administrators who want to share access to a system and part of its data but control what users are able to see on the system. Think sharing special devices. Think sharing certain directory content that containers…
I see some misunderstanding of the goal of Podmansh. The basic idea is certain users have secure systems where they want to allow limited access to the host system. For example you might have some secret data on a…
Do you run with Docker daemon running in rootless mode? Does rancher default to rootless mode? I hear Docker can run in rootless mode but does anyone really run it that way. If I want to start a single container in my…
Podman is a community project. Anyone can setup repos to update any distribution. Many distributions are managing versions of Podman. OpenSuse, Fedora, Centos, RHEL, Debian, Arch all supply updates. There is also the…
It works in the home directory. Just place the quadlet file in $HOME/.config/containers/systemd $ systemctl --user daemon-reload $ systemctl --user start QUADLETNAME.service If you want this to work at boot, you need to…
Sure but to me, and I am obviously biased, if I want to run a container on my system I don't want to fire up multiple daemons in my homedir and then have them sitting out there using resources, when all I want to do is…
Podman can actually quite easily run host environments in containers with systemd running as PID1, giving you very similar features as LXC. Checkout `podman run --rootfs`
This is also related to the Client Server model supported by Docker versus the Fork/Exec Model supported by Podman. Podman works closely with the HPC (High Performance Computing) world. Checkout the article about how…
BTW Podman now supports pasta as well as slirp4netns. I am told pasta gives you better network performance in rootless mode, although I have never tried it.
No, but you can precreate a network namespace and allow rootless Podman to join the network namespace.
Agree, I believe that the world should move to using Kubernetes YAML for running multiple container workloads. Whether you are running on a single node or in a kubernetes cluster. Docker-Compose while supported by…
Sure, and bottom line the OS/Kernel prevent you from doing some things in rootless mode, although we are always attempting to push the boundaries on what is allowed, in a secure way. Rootless mode works for the great…
There have been major vulnerabilities over the years where being root allow the container to take over the system. Checkout https://www.stackrox.io/blog/the-runc-vulnerability-a-deep-d...
Running containers without a daemon in rootful and rootless mode is better and more secure in many ways. If you want to understand all of the security features of Podman take a look at chapters 10 and 11 of my book…
Most of these are issues with running rootless not necessarily with running podman. Podman in rootful mode does not have most of these issues.
BTW Podman has been ported to FreeBSD and works with jails. Although I have never tried it.