redbeardymcgee/podbox
1
0
Fork 0
Code Issues 1 Pull requests Projects Releases Packages Wiki Activity Actions

Update ubuntu.md

Browse source
This commit is contained in:
EphemeralDev 2025-01-25 21:28:28 -05:00 • committed by rbm
parent 318b908637
commit e77743003f
1 changed files with 4 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
ubuntu.md
View file

@ -50,7 +50,7 @@ rootless environment for our containers to run in.
## Install
```bash
sudo apt install podman
sudo apt install podman systemd-container
## Make sure podman is running
systemctl enable --now podman
@ -95,7 +95,9 @@ See [jdboyd blog post for PARTIAL examples using UFW, iptables, and nftables](ht
## Prepare container user
This user will be the owner of all containers with no login shell or root
privileges.
privileges.
Container user should have range of uid/gid automatically generated. See [subuid and subgid tutorial](https://github.com/containers/podman/blob/main/docs/tutorials/rootless_tutorial.md#etcsubuid-and-etcsubgid-configuration) to verify range or create if it does not exist.
Note $ctuser is a placeholder, replace with your username
@ -114,8 +116,6 @@ sudo useradd --create-home \
$ctuser
# Lock user from password login
sudo usermod --lock $ctuser
# Add container sub-ids
sudo usermod --add-subuids 200000-299999 --add-subgids 200000-299999 $ctuser
# Start $ctuser session at boot without login
loginctl enable-linger $ctuser
```
@ -128,9 +128,6 @@ loginctl enable-linger $ctuser
>
> [reddit post](https://old.reddit.com/r/linuxadmin/comments/rxrczr/in_interesting_tidbit_i_just_learned_about_the/)
Install systemd-container
`sudo apt install systemd-container`
```bash
# Switch to $ctuser
# Note do not remove the trailing @