Clément Désiles
43b510e77f
pacman strips file capabilities, leaving rootless podman unable to set up user namespaces (rc 125). Re-apply cap_setuid/cap_setgid on Arch.
Podman Role
Installs and configures Podman for container management with support for Docker Compose compatibility.
Features
- Installs Podman, podman-compose, and crun (OCI runtime)
- Configurable logging backend (journald or k8s-file)
- Container registry search configuration
- Shared projects directory for Kubernetes YAML files
Container Logging
journald (default):
- Logs sent to systemd journal
- View:
journalctl CONTAINER_NAME=<name> -f
k8s-file:
- Logs stored as JSON files with automatic rotation
- Configured via
podman_log_max_sizeandpodman_log_max_files
Switch via podman_log_driver variable.
Hands-on Commands
# View container logs (journald)
journalctl CONTAINER_NAME=immich_server -f
# View container logs (k8s-file)
podman logs -f immich_server
# Check log driver
podman info --format '{{.Host.LogDriver}}'
# Inspect container log config
podman inspect <container> | jq '.[0].HostConfig.LogConfig'
# Test configuration
podman run --rm alpine echo "OK"
# Play Kubernetes YAML
podman play kube --replace /path/to/pod.yaml
# Stop pod
podman play kube --down /path/to/pod.yaml
# List pods
podman pod ls