Posts
4983
Following
329
Followers
494
Linux kernel hacker and maintainer etc.

OpenPGP: 3AB05486C7752FE1
@ikkeT did the trick:

```
$ podman images -qa
de5f96374006
6df894023726
```

Two is expected: docker.io/library/ubuntu:20.04 + R&D image. I don't really have opinions on container languages tbh :-) I use docker format because it is used by the keystone project. podman-unshare is just useful tool for what I do sometimes.
1
0
1

Jarkko Sakkinen

Edited 2 years ago

@ikkeT After searching I think I found a solution: export BUILDAH_LAYERS=false

1
0
1
@ikkeT i like `podman-unshare` command
0
0
1
@ikkeT I would actually want to know that if I ask to build an image why I get the image yes but also ton of image's without tags :-) Pruning would mask the problem.
1
0
0
@ikkeT a major caveat in podman is that it seems to produce a pile of intermediate images (?) that i do not have use and have to clean up after build.
0
0
1
@ppisa thanks! i was not aware that you can pass a file to parted, that was reallly useful nit here!
0
0
0

Jarkko Sakkinen

Edited 2 years ago
How would you partition a pre-created image file (let's say with dd or qemu-img), partition it, and format each partition with the file system of your choice without having privileged access to the system (e.g. no access to the loopback device)?

The only robust option I'm aware of is to create a #QEMU VM just for partitioning and formatting another image (i.e. it runs a script and shuts down immediately after that).

PS. In this scenario, a container, given more infrastructure required, would actually be worse and more heavy-weight option than a VM.

#partitioning
1
0
0

Jarkko Sakkinen

Edited 2 years ago

@ikkeT did the switch to podman as the same build command-line and Dockerfile did not cause issues. Just wanted be cautious at first :-)

Apparently these also got pre-created (probably) by Debian package’s post-install script:

$ cat /etc/sub{uid,gid}
jarkko:100000:65536
jarkko:100000:65536

This is the first time in my life when I’m pro-actively using containers in my work so better to be still somewhat conservative in choices and take babysteps :-) Although it gives some lift that I know what naemspaces and cgroups are, and how they work.

1
0
1

Jarkko Sakkinen

Edited 2 years ago
For a mobile device (meaning also laptop) I'd stick to full disk encryption but let's say a desktop PC at home it would be nice if using ecryptfs would be more robust, and IMHO the main glitch comes from the remote access. The reasons being that it is then easier to boot and also better supports shared access, which is obviously more common with a home desktop.
0
0
0

Jarkko Sakkinen

Wondering if there would be a way to sort #ecryptfs and #ssh conflict with a PAM module for #OpenSSH that would sort of “plug out” the #authentication part. AFAIK this problem comes from “non-standard” authentication path of OpenSSH: it ignores PAM and does its own thing.

1
0
0
@ikkeT I might switch later on but since Docker was used as a starting point, I'll use it for the time being.
1
0
1

Jarkko Sakkinen

Edited 2 years ago
This is completely bogus behavior because for any software package the defaults should not depend on the file system it is running top of. It should opt-in feature.
1
0
0

Jarkko Sakkinen

Edited 2 years ago

Each build seems to get a new #BTRFS subvolume at /var/lib/docker/btrfs/subvolumes. This will overtime exhaust the whole root file system. In order to disable this behavior, create /etc/docker/daemon.json with the contents:

{
    "storage-driver": "overlay2"
}

I did not know this and neither could login to my system through GDM nor console. Luckily SSH login worked and I could delete all over 800 GB of subvolumes.

IMHO, objectively the default settings in #Docker are the worst ever.

1
0
1

Jarkko Sakkinen

I thought that OK now Chris Roberts' #game finally came out. Then I recalled that it was "Star Citizen", not Starfield :-) Looks like a game that is worth trying 2-3 years from now after a DLC or few and tons of bug fixes.
0
0
0

Jarkko Sakkinen

Edited 2 years ago
@niksii @stedi Paras lisätä vielä, että kyllähän ihan tosiasioiden valossa kahden ison kriisin selättäminen ja NATO-jäsenyys oli historiallisen hyvää viran suorittamista. Nämä näkemykset liittyi vain viimeisimpiin käänteisiin :-) Harva olisi selvinnyt tuosta sopasta ilman katastrofaalisia seurauksia tai terveyden romahtamista.

Ei ylempi kritiikki noin kovia meriittejä varjosta, mutta äänestäjänä luottamus meni.

Suht ei-poliittiselle henkilölle (äänestänyt sitä sun tätä puoluetta ja yleisesti politiikka tuntuu vastenmieliseltä touhulta) asia näyttää siltä, että ensin kalasteltiin vaaleissa saman genren puolueiden ääniä uskottelemalla, että vain SDP voi voittaa. Sen jälkeen Sanna valehteli, että aikoo pysyä eduskunnassa vaalitentissä parhaan lopputuloksen saamiseksi.

Juuri nimenomaan pätevyys tuo aika vahvan näytön tietoisesta valehtelusta, ei epäpätevyys. Sannan meriiteillä tuon tasoinen tehtävä, tai jopa merkittävämpi, olisi ollut täysin mahdollista hankkia myös osallistumatta vaaleihin. Sen takia luottamus ja uskottavuus meni omissa silmissä, ei mahdollisten omien poliittisten kantojen takia tai jonkunlaisen kategorisen vastustamisen takia.
0
0
0
@foone I would add ADA to the list. It is popular choice in military, aviation etc.
0
0
0
@stedi @niksii Mitä tulee Tony Blairin instituuttiin, niin sekin kyllä väkisinkin laskee osakkeita, koska muistan Tonyn Irakin olemattomien joukkotuhoaseiden propagandistina. Tähän melkeinpä suhtaudun kriittisemmin kuin itse kansanedustajan tehtävien jättämiseen, koska pidän lähtökohtaisesti Tonya moraalittomana ihmisenä täysin epäpoliittisista syistä (historialliset faktat).
1
0
0
Show older