Some years ago, I would like to setup Mastodon on my own server to try it but I gave up because I thought it was too complicated. I re-tried and used a docker stack to do it. Let’s see how. Prerequisites I assume you have docker and docker-compose installed, with a reverse-proxy like traefik, haproxy, nginx, or anything else in front to handle your SSL connection. docker-compose file You will find a docker-compose....
Today we will see how to run a rootless containerized gitlab-runner and their jobs with podman instead of docker. I will use a Debian 11 OS for this demo. “rootless containerized” means your gitlab-runner container and their jobs will be executed in a user scope and not a root one with full power. It is better for your security. ;-) At least gitlab-runner 15.3 and podman 4.2 versions are required....
The problem So you are trying to use RedHat official docker images, also called UBI for Universal Base Images in your CI/CD and try to install some packages. Sometimes it works: $ docker run -it --rm redhat/ubi9:latest [root@6afe7431c74f /]# dnf install nginx Updating Subscription Management repositories. Unable to read consumer identity Subscription Manager is operating in container mode. This system is not registered with an entitlement server. You can use subscription-manager to register....
Podman ? Podman is a daemonless container engine for developing, managing, and running Open Container Initiative (OCI) containers and container images on your Linux System. Podman provides a Docker-compatible command line front end that can simply alias the Docker cli, alias docker=podman. You can know more on their website. If you want to use podman / podman-compose in place of docker / docker-compose on Debian, you are reading the right how-to :-)...
TL;DR If you don’t care about distroless bla-bla and just want to know how to create distroless alpine images, click here Distroless ? In a distroless docker image, you won’t find any shell, package manager or utilities such as grep, sed, awk, … It runs only your application and nothing else. Don’t expect to launch commands like docker run -it my-distroless-image something, it will fail with a message like this one:...