blog [AdminSysGNULinux]

blog

Table des matières

4 billet(s) pour septembre 2026

2026:
- janvier
- février
- mars
- avril
- mai
- juin
- juillet
- août
- septembre

2025:
- mars
- avril
- mai
- juin
- juillet
- août
- septembre
- octobre
- novembre
- décembre

4 billet(s) pour septembre 2026

Notes HTTP Strict Transport Security - HSTS	2026/09/18 11:04	Jean-Baptiste
Notes GNU Linux GPU carte graphiques	2026/09/08 15:49	Jean-Baptiste
Notes GNU Linux graphique	2026/09/08 15:42	Jean-Baptiste
Notes urlencoding - passer des mots de passe en HTTPS	2026/09/03 17:58	Jean-Baptiste

Notes namespaces unshare mount bind shared

Voir :

Autres

findmnt -o TARGET,PROPAGATION /opt
 
cat /proc/1/mountinfo

Pb

Err WARN[0001] "/" is not a shared mount, this could cause issues or missing mounts with rootless containers

$ podman pull docker.io/hadolint/hadolint
WARN[0001] "/" is not a shared mount, this could cause issues or missing mounts with rootless containers

Solution

sudo mount --make-shared /

2025/10/05 01:45 · Jean-Baptiste

brouillon, mount, namespace

Gestion des droits d'accès

Voir :

RBAC
MAC
https://en.m.wikipedia.org/wiki/Capability-based_security
Syscall / seccomp
Traditional POSIX permissions

2025/10/02 20:22 · Jean-Baptiste

Architecture et code - bonnes pratiques - design pattern

Voir :

Voir aussi :

Problèmes informatiques
Bonnes pratiques Ansible
Définitions Reproductibilité
Idempotence - réentrance
Rootless
(Serverless) Stateless

Méthode :

Principe de substitution de Liskov

2025/10/01 20:19 · Jean-Baptiste

Podman NFS rootless

Voir aussi :

Source et explications : https://www.redhat.com/en/blog/rootless-podman-nfs

Changer

~/.config/containers/storage.conf

[storage]  
driver = "overlay"  
runroot = "/run/user/1000"  
graphroot = "/home/myuser/.local/share/containers/storage"

En

[storage]  
driver = "overlay"  
runroot = "/run/user/1000"  
graphroot = "/var/tmp/myuser/containers/storage

Ou créer un FS

truncate -s 10g /home/myuser/xfs.img  
mkfs.xfs -m reflink=1 /home/myuser/xfs.img
mount /home/myuser/xfs.img /home/myuser/.local/share/containers

Autres

--userns=keep-id

ignore_chmod_errors = "true" in storage.conf

~/.config/containers/storage.conf

[storage]
driver="overlay"
[storage.options]
mount_program = "/usr/bin/fuse-overlayfs"
[storage.options.overlay]
mountopt="xattr_permissions=2,threaded=1"

2025/10/01 15:31 · Jean-Baptiste

brouillon, podman, nfs, rootless, containers

Err podman - User-selected graph driver overlay overwritten by graph driver vfs from database

Voir :

https://docs.docker.com/engine/storage/drivers/select-storage-driver/

Voir aussi :

CONTAINERD_SNAPSHOTTER

$ podman search nginx
ERRO[0000] User-selected graph driver "overlay" overwritten by graph driver "vfs" from database - delete libpod local files ("/home/jean/.local/share/containers/storage") to resolve.  May prevent use of images created by other tools 
ERRO[0000] User-selected graph driver "overlay" overwritten by graph driver "vfs" from database - delete libpod local files ("/home/jean/.local/share/containers/storage") to resolve.  May prevent use of images created by other tools

$ podman info --format '{{ .Store.GraphDriverName }}'
podman info --format '{{ .Store.GraphDriverName }}'
ERRO[0000] User-selected graph driver "overlay" overwritten by graph driver "vfs" from database - delete libpod local files ("/home/jean/.local/share/containers/storage") to resolve.  May prevent use of images created by other tools 
vfs

~/.config/containers/storage.conf

[storage]
driver = "overlay"
[storage.options]
mount_program = "/usr/bin/fuse-overlayfs"

$ nerdctl info | grep -i "storage"
 Storage Driver: overlayfs
  Storage: native overlayfs

$ ls -lh /home/jean/.local/share/containers/storage/libpod/bolt_state.db 
-rw------- 1 jean jean 128K sep 30 14:26 /home/jean/.local/share/containers/storage/libpod/bolt_state.db

env STORAGE_DRIVER=vfs podman search nginx
env STORAGE_DRIVER=overlayfs podman search nginx

Solution

rm ~/.config/containers/storage.conf
mv /home/jean/.local/share/containers/storage/libpod/ /home/jean/.local/share/containers/storage/libpod.bak

Voir aussi

podman system reset

Autres

# ctr plugins ls | grep snapshot
io.containerd.snapshotter.v1           blockfile                linux/amd64    skip      
io.containerd.snapshotter.v1           btrfs                    linux/amd64    skip      
io.containerd.snapshotter.v1           devmapper                linux/amd64    skip      
io.containerd.snapshotter.v1           native                   linux/amd64    ok        
io.containerd.snapshotter.v1           overlayfs                linux/amd64    ok        
io.containerd.snapshotter.v1           aufs                     linux/amd64    skip      
io.containerd.snapshotter.v1           zfs                      linux/amd64    skip      
io.containerd.service.v1               snapshots-service        -              ok        
io.containerd.grpc.v1                  snapshots                -              ok

sudo ctr containers info my-container

2025/09/30 21:44 · Jean-Baptiste

brouillon, podman, storage

<< Billets récents | Anciens billets >>

blog.txt · Dernière modification : 2025/03/24 15:06 de 127.0.0.1