Podman - Revision history

Staticdev: The way to change registries globally caused conflicts and does not work.

2026-02-07T06:49:09Z

The way to change registries globally caused conflicts and does not work.

← Older revision		Revision as of 06:49, 7 February 2026
Line 120:		Line 120:
	To avoid this issue, you might restrict its registries configuration.		To avoid this issue, you might restrict its registries configuration.

	You can ~~do such using [~~[~~Home Manager]~~] ~~manually:~~		You can change the global registries with:<syntaxhighlight lang="nix">
			virtualisation.containers.registries.search = [ "docker.io" ];
			</syntaxhighlight>

	~~{{File\|3=# Global `/etc/containers/~~registries~~.conf`~~		For user-scoped registries you can do using [[Home Manager]] manually:
	~~environment.etc."containers/registries.conf".text = ''~~
	[~~registries.search~~]
	~~registries = ['docker.io'~~]
	~~'';~~

	# User-scoped `~/.config/containers/registries`		{{File\|3=# User-scoped `~/.config/containers/registries`
	xdg.configFile."containers/registries.conf".text = ''		xdg.configFile."containers/registries.conf".text = ''
	[registries.search]		[registries.search]

Malix: enhance: headers

2025-10-01T15:39:49Z

enhance: headers

← Older revision		Revision as of 15:39, 1 October 2025
Line 25:		Line 25:
	See [https://docs.podman.io/en/stable/markdown/podman-compose.1.html the official documentation]		See [https://docs.podman.io/en/stable/markdown/podman-compose.1.html the official documentation]

	=== ~~Using podman with~~ ZFS ===		=== With ZFS ===

	Rootless can't use [[ZFS]] directly but the overlay needs POSIX ACL enabled for the underlying ZFS filesystem, ie., <code>acltype=posixacl</code>		Rootless can't use [[ZFS]] directly but the overlay needs POSIX ACL enabled for the underlying ZFS filesystem, ie., <code>acltype=posixacl</code>
Line 31:		Line 31:
	Best to mount a dataset under <code>/var/lib/containers/storage</code> with property <code>acltype=posixacl</code>.		Best to mount a dataset under <code>/var/lib/containers/storage</code> with property <code>acltype=posixacl</code>.

	=== ~~Use Podman within~~ nix-shell ===		=== Within nix-shell ===
	From https://gist.github.com/adisbladis/187204cb772800489ee3dac4acdd9947 :<blockquote>{{File\|3={ pkgs ? import <nixpkgs> {} }:		From https://gist.github.com/adisbladis/187204cb772800489ee3dac4acdd9947 :<blockquote>{{File\|3={ pkgs ? import <nixpkgs> {} }:

Line 89:		Line 89:
	}\|name=podman-shell.nix\|lang=nix}}</blockquote>Note that rootless podman requires newuidmap (from shadow). If you're not on NixOS, this cannot be supplied by the Nix package 'shadow' since [https://nixos.org/manual/nix/unstable/expressions/derivations.html setuid/setgid programs are not currently supported by Nix].		}\|name=podman-shell.nix\|lang=nix}}</blockquote>Note that rootless podman requires newuidmap (from shadow). If you're not on NixOS, this cannot be supplied by the Nix package 'shadow' since [https://nixos.org/manual/nix/unstable/expressions/derivations.html setuid/setgid programs are not currently supported by Nix].

	=== ~~Run Podman containers~~ as systemd services ===		=== Containers as systemd services ===
	<syntaxHighlight lang="nix">		<syntaxHighlight lang="nix">
	{		{
Line 103:		Line 103:
	</syntaxHighlight>		</syntaxHighlight>

	=== ~~Run cross~~-architecture containers ~~with~~ binfmt/qemu ===		=== Cross-architecture containers using binfmt/qemu ===
	<syntaxHighlight lang="nix">		<syntaxHighlight lang="nix">
	boot.binfmt = {		boot.binfmt = {
Line 115:		Line 115:
	</syntaxhighlight>		</syntaxhighlight>

	=== ~~DevContainer~~ ===		=== DevContainers ===
	Using Podman, it is possible that the process of creation of DevContainers' containers to become stuck at the "Please select an image URL" step.		Using Podman, it is possible that the process of creation of DevContainers' containers to become stuck at the "Please select an image URL" step.

Malix: general enhancements

2025-10-01T15:38:06Z

general enhancements

Show changes

Jonniecache: /* Run cross architecture containers with binfmt/qemu */

2025-02-22T18:37:10Z

Run cross architecture containers with binfmt/qemu

← Older revision		Revision as of 18:37, 22 February 2025
Line 51:		Line 51:
	</syntaxHighlight>		</syntaxHighlight>

	=== Run cross architecture containers with binfmt/qemu ===		=== Run cross-architecture containers with binfmt/qemu ===
	<syntaxHighlight lang="nix">		<syntaxHighlight lang="nix">
	boot.binfmt = {		boot.binfmt = {

Jonniecache: /* Tips and tricks */

2025-02-22T18:32:59Z

Tips and tricks

← Older revision		Revision as of 18:32, 22 February 2025
Line 63:		Line 63:
	</syntaxHighlight>		</syntaxHighlight>

	~~'''~~DevContainer~~'''~~		=== DevContainer ===

	To use DevContainer with Podman, it is possible that the process of creation of containers is stuck a `Please select an image URL`.		To use DevContainer with Podman, it is possible that the process of creation of containers is stuck a `Please select an image URL`.

Drupol at 18:38, 21 February 2025

2025-02-21T18:38:40Z

@@ Line 61: / Line 61: @@
 $ podman run --arch arm64 'docker.io/alpine:latest' arch
 aarch64
 </syntaxHighlight>

Jonniecache at 13:23, 21 February 2025

2025-02-21T13:23:55Z

@@ Line 49: / Line 49: @@
    };
+}
 </syntaxHighlight>

Klinger: Added link to website

2024-09-26T20:41:11Z

Added link to website

← Older revision		Revision as of 20:41, 26 September 2024
Line 1:		Line 1:
	Podman can run rootless containers and be a drop-in replacement for [[Docker]].		[https://podman.io/ Podman] can run rootless containers and be a drop-in replacement for [[Docker]].

	== Setup ==		== Setup ==

Onny: Add user permissions

2024-09-17T07:58:23Z

Add user permissions

← Older revision		Revision as of 07:58, 17 September 2024
Line 15:		Line 15:
	};		};

	</syntaxhighlight>		users.users.myuser = {
			isNormalUser = true;
			extraGroups = [ "podman" ];
			};
			</syntaxhighlight>Replace <code>myuser</code> with your current user. A reboot or re-login might be required for the permissions to take effect after applying changes.

	== Tips and tricks ==		== Tips and tricks ==

Onny: Cleanup

2024-09-17T07:43:20Z

Cleanup

← Older revision		Revision as of 07:43, 17 September 2024
Line 1:		Line 1:
	Podman can run rootless containers and be a drop-in replacement for [[Docker]].		Podman can run rootless containers and be a drop-in replacement for [[Docker]].

	== ~~Install and configure podman with NixOS service configuration~~ ==		== Setup ==
			To enable Podman support, add following lines to your system configuration<syntaxhighlight lang="nix">
	<syntaxhighlight lang="nix">		# Enable common container config files in /etc/containers
	~~{ pkgs, ... }:~~		virtualisation.containers.enable = true;
	{		virtualisation = {
	# Enable common container config files in /etc/containers		podman = {
	virtualisation.containers.enable = true;		enable = true;
	virtualisation = {		# Create a `docker` alias for podman, to use it as a drop-in replacement
	podman = {		dockerCompat = true;
	enable = true;		# Required for containers under podman-compose to be able to talk to each other.
			defaultNetwork.settings.dns_enabled = true;
	# Create a `docker` alias for podman, to use it as a drop-in replacement
	dockerCompat = true;

	# Required for containers under podman-compose to be able to talk to each other.
	defaultNetwork.settings.dns_enabled = true;
	};
	};		};
			};

	~~# Useful other development tools~~
	~~environment.systemPackages = with pkgs; [~~
	~~dive # look into docker image layers~~
	~~podman-tui # status of containers in the terminal~~
	~~#docker-compose # start group of containers for dev~~
	~~podman-compose # start group of containers for dev~~
	];
	}
	</syntaxhighlight>		</syntaxhighlight>

			== Tips and tricks ==

	=== podman-compose ===		=== podman-compose ===
Line 39:		Line 28:
	Best to mount a dataset under <code>/var/lib/containers/storage</code> with property <code>acltype=posixacl</code>.		Best to mount a dataset under <code>/var/lib/containers/storage</code> with property <code>acltype=posixacl</code>.

	== Use Podman within nix-shell ==		=== Use Podman within nix-shell ===

	https://gist.github.com/adisbladis/187204cb772800489ee3dac4acdd9947		https://gist.github.com/adisbladis/187204cb772800489ee3dac4acdd9947

	Note that rootless podman requires newuidmap (from shadow). If you're not on NixOS, this cannot be supplied by the Nix package 'shadow' since [https://nixos.org/manual/nix/unstable/expressions/derivations.html setuid/setgid programs are not currently supported by Nix].		Note that rootless podman requires newuidmap (from shadow). If you're not on NixOS, this cannot be supplied by the Nix package 'shadow' since [https://nixos.org/manual/nix/unstable/expressions/derivations.html setuid/setgid programs are not currently supported by Nix].

	== Run Podman containers as systemd services ==		=== Run Podman containers as systemd services ===

	<syntaxHighlight lang="nix">		<syntaxHighlight lang="nix">
	{		{