Re: [atomic-devel] podman user defined network support

2019-09-09 Thread Muayyad AlSadi
; > is anybody use containers with podman in any real environment? > > let's just assume a database and a service (where we can't put them into > the same pod)? > eg. we've a db cluster and a few service which use that cluster. > > thanks in advance. > > On Fr

Re: [atomic-devel] Bootable fedora atomic host 29 for cloud(OpenStack)?

2019-06-22 Thread Muayyad AlSadi
here https://download.fedoraproject.org/pub/fedora/linux/releases/30/Cloud/x86_64/images/ On Sat, Jun 22, 2019 at 4:46 AM Dusty Mabe wrote: > > > On 6/11/19 5:28 PM, Feilong Wang wrote: > > Hi there, > > > > I'm new for the fedora atomic community, so please bear me if the > question is silly.

Re: [atomic-devel] how to cancel pending

2019-05-20 Thread Muayyad AlSadi
I found the answer for first question, which is rpm-ostree cancel but how show progress On Mon, May 20, 2019 at 5:12 PM Muayyad AlSadi wrote: > Hi, > > I was about to upgrade my fedora 29 silverblue to 30 > > https://fedoramagazine.org/how-to-rebase-to-fedora-30-beta-on-si

[atomic-devel] how to cancel pending

2019-05-20 Thread Muayyad AlSadi
Hi, I was about to upgrade my fedora 29 silverblue to 30 https://fedoramagazine.org/how-to-rebase-to-fedora-30-beta-on-silverblue/ I was about rebase # rpm-ostree rebase fedora-workstation:fedora/30/x86_64/silverblue error: System transaction in progress # rpm-ostree status State: busy I

Re: [atomic-devel] podman user defined network support

2019-05-16 Thread Muayyad AlSadi
was able to run this complex stack having: a django web interface Postgres database rabbitmq memcached tasks all linked to gather and non-exported to host except the django web interface https://github.com/muayyad-alsadi/podman-compose/blob/master/examples/awx/docker-compose.yml the trick is like

Re: [atomic-devel] recommended way of running a container

2019-05-06 Thread Muayyad AlSadi
there were two ways I used to do this with docker and it can also be done with podman 1. stateless way, always fresh ExecStartPre=-/bin/podman stop -t=1 mycnt ExecStartPre=-/bin/podman remove mycnt ExecStart=/bin/podman run -i --name mycnt -v myimg mycmd ExecReload=-/bin/podman restart -t=1

Re: [atomic-devel] moby-engine for centos/epel

2019-05-06 Thread Muayyad AlSadi
> Oh, and forgot, would like to see it in EPEL for reasons that you will likely see this week :-) thank you very much On Mon, May 6, 2019 at 12:29 PM Scott McCarty wrote: > Oh, and forgot, would like to see it in EPEL for reasons that you will > likely see this week :-) > > On Mon, May 6, 2019

Re: [atomic-devel] moby-engine for centos/epel

2019-05-06 Thread Muayyad AlSadi
> SUSE has a variation of these patches for their docker package[1], > maybe these could help with moby-engine? I guess fedora's moby-engine .src.rpm would be just fine https://src.fedoraproject.org/rpms/moby-engine/tree/master On Mon, May 6, 2019 at 11:57 AM Neal Gompa wrote: > On Mon, Ma

Re: [atomic-devel] moby-engine for centos/epel

2019-05-05 Thread Muayyad AlSadi
ker-specific projects one of them give our developers shell access to the container or its logs (using nothing but good old ssh) https://github.com/muayyad-alsadi/docker-jumpshell and of course this can be ported to podman easily, or even better with podman users can run containers as their o

Re: [atomic-devel] moby-engine for centos/epel

2019-05-05 Thread Muayyad AlSadi
e about compatibility maybe we should ship moby-engine in a different repo just like we used to do with docker and docker-latest https://access.redhat.com/articles/2317361 On Sun, May 5, 2019 at 2:34 PM Daniel Walsh wrote: > On 5/5/19 4:33 AM, Muayyad AlSadi wrote: > > Hi, > >

[atomic-devel] moby-engine for centos/epel

2019-05-05 Thread Muayyad AlSadi
Hi, it seems that fedora had shipped moby-engine, when can we ship it for centos/epel? if not in epel,link for that repo?

Re: [atomic-devel] forbidden base package replacement

2018-05-31 Thread Muayyad AlSadi
e ostree registry.fedoraproject.org/fedora-minimal /bin/bash bash-4.4# [image: Screenshot from 2018-05-31 16-09-12.png] ​ On Thu, May 31, 2018 at 4:02 PM arnaud gaboury wrote: > On 05/31/2018 02:53 PM, Muayyad AlSadi wrote: > > you can use "atomic" command line tool to run whatever

Re: [atomic-devel] forbidden base package replacement

2018-05-31 Thread Muayyad AlSadi
you can use "atomic" command line tool to run whatever you want inside a system container (even without docker daemon) http://www.projectatomic.io/blog/2018/03/containers-w-skopeo-ostree-oci/ http://www.projectatomic.io/blog/2017/06/creating-system-containers/ On Thu, May 31, 2018 at 3:04 PM arna

[atomic-devel] rpm-ostree equivalent of fastest mirror and parallel downloads

2018-05-17 Thread Muayyad AlSadi
Hi, in /etc/dnf/dnf.conf I have fastestmirror=1 max_parallel_downloads=20 what is the of that in rpm-ostree?

Re: [atomic-devel] atomic install/run cockpit does not work on atomic-ws

2018-03-29 Thread Muayyad AlSadi
Then it's might be a good time to have detas for ws. On Thu, Mar 29, 2018, 6:39 PM Micah Abbott wrote: > On 03/29/2018 12:34 PM, Muayyad AlSadi wrote: > > > rpm-ostree upgrade --check > > > > it gives me, > > > > mporting metadata [=] 100%

Re: [atomic-devel] atomic install/run cockpit does not work on atomic-ws

2018-03-29 Thread Muayyad AlSadi
> rpm-ostree upgrade --check it gives me, mporting metadata [=] 100% ** ERROR:src/app/rpmostree-dbus-helpers.c:1362:rpmostree_print_cached_update: assertion failed: (g_variant_dict_lookup (&dict, "ref-has-new-commit", "b", &is_new_checksum)) Aborted (core dumped) while "rpm-ostree up

Re: [atomic-devel] atomic install/run cockpit does not work on atomic-ws

2018-03-23 Thread Muayyad AlSadi
yer into the updae? rpm-ostree has all needed information to do this. it knows they were added in the past it knows they are still missing in the update it knows how to merge (or rebase) them ​ On Fri, Mar 23, 2018 at 7:34 PM, Dusty Mabe wrote: > > > On 03/23/2018 11:56 AM, M

[atomic-devel] atomic install/run cockpit does not work on atomic-ws

2018-03-23 Thread Muayyad AlSadi
hi, I've installed the latest atomic workstation on a vm I tried to run cockpit by typing atomic install registry.fedoraproject.org/f27/cockpit but it gives cockpit-bridge must be installed on host is there a way to run cockpit on atomic workstation? BTW: I wrote a review in Arabic for atomi

Re: [atomic-devel] testing atomic ws on virt-manager

2018-03-23 Thread Muayyad AlSadi
thank you, after making it permissive it worked On Fri, Mar 23, 2018 at 3:26 AM, Dusty Mabe wrote: > > > On 03/22/2018 07:39 PM, Muayyad AlSadi wrote: > > hi, > > > > I'm using qemu-kvm with virt-manager on Fedora 27 > > and trying to inst

[atomic-devel] testing atomic ws on virt-manager

2018-03-22 Thread Muayyad AlSadi
hi, I'm using qemu-kvm with virt-manager on Fedora 27 and trying to install atomic ws, from here https://kojipkgs.fedoraproject.org/compose/branched/Fedora-28-20180322.n.0/compose/AtomicWorkstation/x86_64/iso/ the installation progress bar is very wrong, but that is not a problem. I waited for

Re: [atomic-devel] Kubernetes manual setup (need reviewers)

2018-03-14 Thread Muayyad AlSadi
Make it public? On Wed, Mar 14, 2018, 8:29 PM Chris Negus wrote: > I have a draft of a write-up for running Kubernetes on Fedora or Fedora > Atomic, using kubeadm, that I'd like to submit to upstream Kubernetes. I > would appreciate people reviewing the document and trying the procedure. > > Bef

Re: [atomic-devel] Kubernetes manual setup

2018-03-06 Thread Muayyad AlSadi
> Well actually... the main way I've used these system containers is > with the ansible scripts at: > https://github.com/kubernetes/contrib/tree/master/ansible but those > have been deprecated. > You can say that they have been moved to https://github.com/kubernetes-incubator/kubespray >

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-03-06 Thread Muayyad AlSadi
what about requiring sudo to do nsenter? (even when using runc rootless) On Mon, Mar 5, 2018 at 4:09 PM, Giuseppe Scrivano wrote: > Muayyad AlSadi writes: > > > when using runc > > > > $ mypid=`runc list | tail -n 1 | awk '{print $2}'` > > $

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-03-05 Thread Muayyad AlSadi
with runc and why bwraps failed even if I'm root On Mon, Mar 5, 2018 at 1:23 PM, Giuseppe Scrivano wrote: > Muayyad AlSadi writes: > > > it seems there is no bwrap-oci exec and nsenter does not work as regular > user. > > > > how to enter an existing us

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-03-05 Thread Muayyad AlSadi
it seems there is no bwrap-oci exec and nsenter does not work as regular user. how to enter an existing user name space just like "runc exec redis /bin/sh" using bubble wrap or nsenter? On Sun, Feb 25, 2018 at 10:58 PM, Muayyad AlSadi wrote: > > is this still broken with my

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-02-25 Thread Muayyad AlSadi
: http://www.projectatomic.io/blog/. > What do you think? I'm in. On Sun, Feb 25, 2018 at 7:41 PM, Giuseppe Scrivano wrote: > Muayyad AlSadi writes: > > > here is my blog post > > > > https://bcksp.blogspot.com/2018/02/diy-docker-using- > skopeoostreerunc.html > >

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-02-25 Thread Muayyad AlSadi
pm -q bwrap-oci bwrap-oci-0.2-1.fc27.x86_64 your PR and branch works fine On Sun, Feb 25, 2018 at 4:29 PM, Giuseppe Scrivano wrote: > > Muayyad AlSadi writes: > > > no, it did not work for me > > > > I've removed the entire mount section > > > >

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-02-25 Thread Muayyad AlSadi
v-bind /dev/tty /dev/tty --hostname runc --remount-ro / sh the config is attached On Sun, Feb 25, 2018 at 2:01 PM, Giuseppe Scrivano wrote: > Hi Muayyad, > > Muayyad AlSadi writes: > > > here is my blog post > > > > https://bcksp.blogspot.com/2018/02/diy-dock

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-02-23 Thread Muayyad AlSadi
ot;/sys", "type": "none", "source": "/sys", "options": [ "rbind", "nosuid", "noexec", "nodev",

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-02-22 Thread Muayyad AlSadi
after that, the following worked cd cont1 runc spec runc run myname I also tried "runc spec --rootless" and it worked but bwrap-oci did not $ bwrap-oci run bwrap-oci: unknown mount type none On Fri, Feb 23, 2018 at 1:33 AM, Muayyad AlSadi wrote: > ostree checkout ociimage/n

Re: [atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-02-22 Thread Muayyad AlSadi
ostree checkout ociimage/nginx_3Alatest cont1 cat cont1/manifest.json | jq '.layers[]|.digest' | sed -re 's/"//g' | cut -d ':' -f 2 | while read a; do echo ostree checkout --union ociimage/$a cont1/rootfs; done what's next? On Fri, Feb 23, 2018 at 12:18 A

[atomic-devel] how to try combining skopeo+ostree+bwrap-oci

2018-02-22 Thread Muayyad AlSadi
hi, I'm running fedora as regular user and I wonder how can I use skopeo+ostree+bwrap-oci to run a docker image using bwrap-oci having files stored as ostree $ mkdir ostree $ cd ostree $ ostree init --mode=bare-user --repo=$PWD $ skopeo copy docker://redis:alpine ostree:redis@$PWD $ skopeo copy d

Re: [atomic-devel] Httpd vs. Containers

2017-04-24 Thread Muayyad AlSadi
You can just symbolic link that to /data or /tmp Or adjust config /etc/httpd/ to use /dev/stdout and /dev/stderr On Mon, Apr 24, 2017, 7:49 PM Josh Berkus wrote: > Folks, > > I've been building some containers for our libraries, and I'm noticing > that there's a serious deficiency in the standar

Re: [atomic-devel] creating qcow2 for proof of concept appliance

2017-03-18 Thread Muayyad AlSadi
ng I ended with a qcow2 with a working alpine qcow2 + ostree + fedora's grub2 how to make that into ostree ? it seems that their initrd is just a simple script, and it seems that supporting LVM in alpine is not fun so I'll stop here On Sat, Mar 18, 2017 at 12:01 AM, Muayyad AlSadi wro

Re: [atomic-devel] creating qcow2 for proof of concept appliance

2017-03-17 Thread Muayyad AlSadi
after adding grub OK: 129 MiB in 68 packages On Fri, Mar 17, 2017 at 11:59 PM, Muayyad AlSadi wrote: > I've done the following so far > > since I'm considering very minimal installation suitable for appliance, I > considered fedora's busybox, but in that ca

Re: [atomic-devel] creating qcow2 for proof of concept appliance

2017-03-17 Thread Muayyad AlSadi
I've done the following so far since I'm considering very minimal installation suitable for appliance, I considered fedora's busybox, but in that case I would need to create a statically linked ostree as I mentioned I'm not doing this to be for production server nor a workstation I tried to start

Re: [atomic-devel] Has anyone considered packaging dumb-init or tini for use in Fedora/CentOS/RHEL?

2017-03-07 Thread Muayyad AlSadi
https://admin.fedoraproject.org/pkgdb/package/rpms/dumb-init/ https://copr.fedorainfracloud.org/coprs/alsadi/dumb-init/ On Tue, Mar 7, 2017 at 4:42 PM, Muayyad AlSadi wrote: > typical use is a Dockerfile having > > RUN curl -sSL -o /usr/local/bin/dumb-init https://github.com/Yelp/dum

Re: [atomic-devel] Has anyone considered packaging dumb-init or tini for use in Fedora/CentOS/RHEL?

2017-03-07 Thread Muayyad AlSadi
typical use is a Dockerfile having RUN curl -sSL -o /usr/local/bin/dumb-init https://github.com/Yelp/dumb-init/releases/download/v1.0.2/dumb-init_1.0.2_amd64 && chmod +x /usr/local/bin/dumb-init ENTRYPOINT ["dumb-init", "--", "/start.sh"] On Tue, Mar 7,

Re: [atomic-devel] Has anyone considered packaging dumb-init or tini for use in Fedora/CentOS/RHEL?

2017-03-07 Thread Muayyad AlSadi
I've packaged dumb-init, it's in copr And there was a package review for official repos > Anyone using these today? yes, I use it along with oneway < https://github.com/muayyad-alsadi/oneway/releases/ > What does dumb-init or tini get me that systemd doesn't? simply

Re: [atomic-devel] creating qcow2 for proof of concept appliance

2017-03-06 Thread Muayyad AlSadi
> So trishna just put out some content recently on how to build yes, I've seen them, and such articles triggered the idea and I have made some custom os-tree builds in the past > your goals ... project typically I use fedora/centos for my REAL work (I work for web company) but the intentio

[atomic-devel] creating qcow2 for proof of concept appliance

2017-03-06 Thread Muayyad AlSadi
hi, I have an idea to demonstrate (in a blog post, video, ..etc.) the power of os-tree and project atomic, outside the word of production servers I have two example use cases, a headless appliance (busybox, simple go http server) a graphical wayland application that display animated project atom

[atomic-devel] SELinux permission problem with fedora 25 but not 24 when using emptyDir: {}

2017-01-14 Thread Muayyad AlSadi
Hi, I have a kube spec like this (full yaml here https://paste.fedoraproject.org/527041/48440635/raw/) ... spec: containers: - name: mypod image: fedora imagePullPolicy: Always command: - /bin/bash args: - "-c"

Re: [atomic-devel] Docker project: Can you have overlay2 speed and density with devicemapper? Yep.

2016-10-26 Thread Muayyad AlSadi
I have a serious question about a way to map UIDs inside the container to UIDs outside it. And a way to specify UID for mounted volumes like /data/ and /app/code/ Let's look to the topic from developer point of view. I have vagrant sshfs mouting my home into the box. My home have volumes owned b

[atomic-devel] Grant your developers jailed shell access to some containers

2016-09-15 Thread Muayyad AlSadi
Hi Checkout this simple project https://github.com/muayyad-alsadi/docker-jumpshell

Re: [atomic-devel] systemd as pid 1 in an unprivileged container.

2016-09-14 Thread Muayyad AlSadi
Here https://github.com/fedora-cloud/Fedora-Dockerfiles And here https://admin.fedoraproject.org/pkgdb/package/rpms/fedora-dockerfiles/ On Wed, Sep 14, 2016, 9:56 PM Daniel J Walsh wrote: > Sure, but I have no idea how to? > > On 09/14/2016 12:34 PM, Muayyad AlSadi wrote: > > w

Re: [atomic-devel] systemd as pid 1 in an unprivileged container.

2016-09-14 Thread Muayyad AlSadi
would you please update this https://hub.docker.com/r/fedora/systemd-systemd/ On Wed, Sep 14, 2016 at 4:14 PM, Muayyad AlSadi wrote: > Awesome! > > On Wed, Sep 14, 2016, 3:51 PM Daniel J Walsh wrote: > >> >> On 09/14/2016 05:26 AM, Muayyad AlSadi wrote: >> >&

Re: [atomic-devel] systemd as pid 1 in an unprivileged container.

2016-09-14 Thread Muayyad AlSadi
Awesome! On Wed, Sep 14, 2016, 3:51 PM Daniel J Walsh wrote: > > On 09/14/2016 05:26 AM, Muayyad AlSadi wrote: > > Nice article. > > I would like to stress that docker is intended to be process container not > system container. > > In adeal (aka. Fictional unicorn)

Re: [atomic-devel] systemd as pid 1 in an unprivileged container.

2016-09-14 Thread Muayyad AlSadi
Nice article. I would like to stress that docker is intended to be process container not system container. In adeal (aka. Fictional unicorn) containers you would have a single process. Your start.sh should exec (to replace the shell) the application ("exec node ." Or "exec java -jar start.jar")

Re: [atomic-devel] Oneway - a way to drop privileges inside containers and lock it like that

2016-09-06 Thread Muayyad AlSadi
xpect it to do? On Tue, Sep 6, 2016, 9:22 PM Daniel J Walsh wrote: > > > On 09/06/2016 02:16 PM, Muayyad AlSadi wrote: > > I only want two processes > > confd and my application (apache or php-fpm or node . or uwsgi ...) > > The role of confd is to watch etcd/consul and

Re: [atomic-devel] Oneway - a way to drop privileges inside containers and lock it like that

2016-09-06 Thread Muayyad AlSadi
W_PRIVS > > right in docker/k8s. > > > On 09/06/2016 01:46 PM, Muayyad AlSadi wrote: > > > > Hi, > > > > Typical fictional unicorn containers should have one process > > > > On practice it's actually processes of one concern ex. Apache > >

[atomic-devel] Oneway - a way to drop privileges inside containers and lock it like that

2016-09-06 Thread Muayyad AlSadi
you think? https://github.com/muayyad-alsadi/oneway/blob/master/README.md

Re: [atomic-devel] Smaller fedora & centos images

2016-07-14 Thread Muayyad AlSadi
cd, kube*, .. ) but I'm not sure if this is even a good idea or not On Thu, Jul 14, 2016 at 12:02 AM, Muayyad AlSadi wrote: > Try fake runtime which provides systemd (fake one indeed). > > On Wed, Jul 13, 2016, 11:55 PM Colin Walters wrote: > >> >> >> On Mon,

Re: [atomic-devel] Blog post about upgrading from f23 atomic to f24?

2016-07-13 Thread Muayyad AlSadi
The commands are here https://fedoraproject.org/wiki/Atomic_Host_upgrade On Jul 14, 2016 1:05 AM, "Muayyad AlSadi" wrote: > Yes it's a simple ostree rebase > > But no, it's not recommended I guess because 23 is more recent and > maintained. > > As you c

Re: [atomic-devel] Blog post about upgrading from f23 atomic to f24?

2016-07-13 Thread Muayyad AlSadi
Yes it's a simple ostree rebase But no, it's not recommended I guess because 23 is more recent and maintained. As you can see here f24 atomic is not released. The latest build is a month ago, while f23 is a week ago https://getfedora.org/en/cloud/download/atomic.html On Jul 14, 2016 12:55 AM,

Re: [atomic-devel] Smaller fedora & centos images

2016-07-13 Thread Muayyad AlSadi
Try fake runtime which provides systemd (fake one indeed). On Wed, Jul 13, 2016, 11:55 PM Colin Walters wrote: > > > On Mon, Jun 20, 2016, at 01:57 PM, Micah Abbott wrote: > > On 06/20/2016 09:38 AM, Joe Brockmeier wrote: > > > Have we published any comparisons of an Alpine image "fully loaded"

Re: [atomic-devel] Smaller fedora & centos images

2016-07-13 Thread Muayyad AlSadi
I'll be happy if arg parsing is missing but the assumed default is nodocs On Wed, Jul 13, 2016, 11:47 PM Colin Walters wrote: > On Wed, Jul 13, 2016, at 04:40 PM, Muayyad AlSadi wrote: > > What about my question about the equivalent of "--setopt tsflags=nodocs" > &g

Re: [atomic-devel] Smaller fedora & centos images

2016-07-13 Thread Muayyad AlSadi
What about my question about the equivalent of "--setopt tsflags=nodocs" @walters does micro-yuminst assume this option On Wed, Jul 13, 2016, 11:25 PM Colin Walters wrote: > On Wed, Jul 13, 2016, at 09:40 AM, Tim St. Clair wrote: > > Awesome! > > Do we have a formal position, or is this still P

Re: [atomic-devel] Replacing registry, atomic app on the home page

2016-07-13 Thread Muayyad AlSadi
Does this mean that I can't use atomic registry with fedora atomic cockpit k8s without openshift origin? On Wed, Jul 13, 2016, 8:25 PM Aaron Weitekamp wrote: > On Jul 13, 2016 11:53 AM, "Josh Berkus" wrote: > > > > I'd like to replace Registry on the home page, because (a) it's not new > > anym

Re: [atomic-devel] Exposing Pods to external network

2016-07-13 Thread Muayyad AlSadi
> Thanks for help replying. > I am not sure how cluster IP will work, let me go through the links, and I > will revert go to you. > > On Mon, Jul 11, 2016 at 1:55 PM, Muayyad AlSadi wrote: > >> I guess you can specify type=NodePort >> >> or use specify externa

Re: [atomic-devel] Smaller fedora & centos images

2016-07-12 Thread Muayyad AlSadi
does your minimal micro-yuminst assume "--setopt tsflags=nodocs" On Tue, Jul 12, 2016 at 9:30 PM, Colin Walters wrote: > ...3 weeks later: > > On Tue, Jun 21, 2016, at 04:59 PM, Colin Walters wrote: > > > It does seem viable to create a `centosmin` image that in some cases uses > different pack

[atomic-devel] free space by removing old ostree

2016-07-11 Thread Muayyad AlSadi
hi, how can we remove old ostree images? for example I upgraded to fedora 24, then rebased to 23 again

Re: [atomic-devel] Exposing Pods to external network

2016-07-11 Thread Muayyad AlSadi
I guess you can specify type=NodePort or use specify externalIPs with type=ClusterIP (which is the default type) kubectl describe service NAME http://kubernetes.io/docs/api-reference/v1/definitions/#_v1_servicespec http://kubernetes.io/docs/user-guide/services/ http://kubernetes.io/docs/user-g

Re: [atomic-devel] Where do I file bugs against Atomic Host?

2016-06-24 Thread Muayyad AlSadi
Maybe if it has hithub, then in github On Fri, Jun 24, 2016, 9:37 PM Tim St. Clair wrote: > I typically file under one and clone for other product. > > On Fri, Jun 24, 2016 at 1:14 PM, Josh Berkus wrote: > > Folks, > > > > So, where do I file bugs against AH which I believe to be generic to AH

Re: [atomic-devel] Atomic ISO has bad default IPtables

2016-06-23 Thread Muayyad AlSadi
I use docker-glue (which can easily be made as a privileged container with host networking / "nsenter --net") that watch specific labels on containers to adjust haproxy/ipvsadm https://github.com/muayyad-alsadi/docker-glue

Re: [atomic-devel] can fedora atomic 23 be upgraded to 24

2016-06-22 Thread Muayyad AlSadi
Thank you On Wed, Jun 22, 2016, 6:49 PM Jonathan Lebon wrote: > - Original Message - > > On 06/22/2016 11:36 AM, Muayyad AlSadi wrote: > > > What about developer mode in grub menu? > > > > The grub entry won't be added as part of a rebase. > >

Re: [atomic-devel] can fedora atomic 23 be upgraded to 24

2016-06-22 Thread Muayyad AlSadi
What about developer mode in grub menu? On Wed, Jun 22, 2016, 6:09 PM Colin Walters wrote: > https://bugzilla.redhat.com/show_bug.cgi?id=1309075 > > On Wed, Jun 22, 2016, at 10:56 AM, Micah Abbott wrote: > > On 06/22/2016 09:34 AM, Muayyad AlSadi wrote: > > > now, it g

Re: [atomic-devel] can fedora atomic 23 be upgraded to 24

2016-06-22 Thread Muayyad AlSadi
it worked with "setenforce 0", for some reason I can't see developer mode in grub menu On Wed, Jun 22, 2016 at 4:34 PM, Muayyad AlSadi wrote: > now, it gave me > > error: fsetxattr: Invalid argument > > I'll try "setenforce 0" and and see >

Re: [atomic-devel] can fedora atomic 23 be upgraded to 24

2016-06-22 Thread Muayyad AlSadi
now, it gave me error: fsetxattr: Invalid argument I'll try "setenforce 0" and and see

Re: [atomic-devel] can fedora atomic 23 be upgraded to 24

2016-06-22 Thread Muayyad AlSadi
gives me 404, I guess there are many unsynced mirrors -bash-4.3# ostree remote add fedora-24 --set=gpg-verify=false https://dl.fedoraproject.org/pub/fedora/linux/atomic/24 -bash-4.3# rpm-ostree rebase fedora-24:fedora-atomic/f24/x86_64/docker-host error: Server returned status 404: Not Found

[atomic-devel] can fedora atomic 23 be upgraded to 24

2016-06-22 Thread Muayyad AlSadi
hi, is there a command to upgrade to fedora atomic 24?

Re: [atomic-devel] Smaller fedora & centos images

2016-06-21 Thread Muayyad AlSadi
community that have that goal and want to charge local disk usage to > the pod (including shared image layers). Admittedly, there are other users > that do not want to do that, but it does mean the on disk format matters > for some folks. > > On Monday, June 20, 2016, Muayyad AlSad

Re: [atomic-devel] Smaller fedora & centos images

2016-06-20 Thread Muayyad AlSadi
I gave up shrinking locales because they compress will There are two use cases for small images 1. The on disk format, which is shared between multiple containers via layers 2. When export tarball and pass it. For 1. Fat does not matter and for 2 it also does not matter because ~100mb becomes 2m

Re: [atomic-devel] Smaller fedora & centos images

2016-06-20 Thread Muayyad AlSadi
-volumes/ On Tue, Jun 21, 2016 at 1:48 AM, Muayyad AlSadi wrote: > given a fake-runtime, > > yum --nogpgcheck --installroot=$OSROOT --releasever=23 --setopt > tsflags=nodocs install httpd > > I got the following > > [root@fedora osroot]# for i in . usr/lib/ usr/lib/locale/

Re: [atomic-devel] Smaller fedora & centos images

2016-06-20 Thread Muayyad AlSadi
1, 2016 at 1:17 AM, Muayyad AlSadi wrote: > >localedef --prefix $OSROOT --list-archive xargs localedef --prefix > $OSROOT --delete-from-archive > > the line was > > localedef --prefix $OSROOT --list-archive | grep -v en_US | xargs > localedef --prefix $OSROOT --delete-from-archive >

Re: [atomic-devel] Smaller fedora & centos images

2016-06-20 Thread Muayyad AlSadi
>localedef --prefix $OSROOT --list-archive xargs localedef --prefix $OSROOT --delete-from-archive the line was localedef --prefix $OSROOT --list-archive | grep -v en_US | xargs localedef --prefix $OSROOT --delete-from-archive

Re: [atomic-devel] Smaller fedora & centos images

2016-06-20 Thread Muayyad AlSadi
> I hacked up some quick Dockerfiles for this particular example (httpd) and the end result is that alpine was still smaller - 8.652 MB vs. 232.8 MB you can use this trick to strip ~100MB localedef --prefix $OSROOT --list-archive xargs localedef --prefix $OSROOT --delete-from-archive mv

Re: [atomic-devel] Smaller fedora & centos images

2016-06-20 Thread Muayyad AlSadi
> . I'm not sure what happened with fakesystemd or systemd-container so do I I personally use my own fake system which does not even have init or any capability, because I don't need it sometimes I use supervisord but in most cases (as this is the recommendation), my entry point is my actual singl

Re: [atomic-devel] Smaller fedora & centos images

2016-06-20 Thread Muayyad AlSadi
I was socked by the size of the following file ls -lh /usr/lib/locale/locale-archive -rw-r--r--. 1 root root 107M Jun 8 11:07 /usr/lib/locale/locale-archive but I was socked more that even after stripping it the total compressed image size did not change at all (because more of the content of th

Re: [atomic-devel] Smaller fedora & centos images

2016-06-18 Thread Muayyad AlSadi
alpine is something like busybox, It does not use the true and tested gnu glibc, it uses musl instead. It has its use case which is different than fedora. Usage of Alpine in official docker images is also political decision because they have hired its main developer. The size of the base image i

Re: [atomic-devel] Flatpak launches

2016-06-15 Thread Muayyad AlSadi
I've used xdg-app long ago, and yes I missed the rename But due to the canonical buzz on every site (including the registerer) about porting snappy craft to all distros and people commenting about flatpak. Flatpak should have better public coverage. On Wed, Jun 15, 2016, 4:35 PM Matt Micene wro

Re: [atomic-devel] SELinux/Docker blog on passing socket descriptors between containers.

2016-05-09 Thread Muayyad AlSadi
Awesome as always On Mon, May 9, 2016, 8:20 PM Daniel J Walsh wrote: > http://danwalsh.livejournal.com/74421.html > >

Re: [atomic-devel] Introducing bubblewrap

2016-05-06 Thread Muayyad AlSadi
aniel J Walsh wrote: > > > On 05/06/2016 03:46 PM, Muayyad AlSadi wrote: > > long long ago we had this < > > https://fedoraproject.org/wiki/Features/RemoveSETUID > > > Yes I remember the guy that did that... The idea there was to take > advantage of File System

Re: [atomic-devel] Introducing bubblewrap

2016-05-06 Thread Muayyad AlSadi
long long ago we had this < https://fedoraproject.org/wiki/Features/RemoveSETUID > There is probably a good case to be made that setuid is more security then a random service that can setup I totally agree, but my humble (maybe ignorant and less informed) idea is something like pam_oddjob_mkhomed

Re: [atomic-devel] Introducing bubblewrap

2016-05-06 Thread Muayyad AlSadi
why setuid? why not just do the non-privileged part, then fire a dbus event to some root service to do the privileged part of adding network config. (and uses policy kit to validate the request). or a root daemon that do the privileged part of network configuration. so in summary an unprivileged

Re: [atomic-devel] Concerns about pushing Docker 1.10 into Fedora23

2016-02-14 Thread Muayyad AlSadi
> Could we prompt the user to optionally prune unused images before migrating? The can recommend on fedora magazine that users should "docker rmi" images that they don't use before update. On Mon, Feb 15, 2016, 4:29 AM Jon Stanley wrote: > On Sun, Feb 14, 2016 at 8:19 PM, Jeremy Eder wrote: >

Re: [atomic-devel] Concerns about pushing Docker 1.10 into Fedora23

2016-02-13 Thread Muayyad AlSadi
> > Well we probably need you guys playing with this, if there is a problem > so we can figure out how to fix it. > > dnf install fedora-repos-rawhide dnf --enable-repo=rawhide update docker now "rpm -q docker" gives me docker-1.10.1-1.git1b79038.fc24.x86_64 first note: migrate took too much tim

Re: [atomic-devel] Concerns about pushing Docker 1.10 into Fedora23

2016-02-12 Thread Muayyad AlSadi
here is a bug introduced by docker 1.10 https://github.com/hashicorp/consul/issues/1706 On Wed, Feb 10, 2016 at 10:37 PM, Daniel J Walsh wrote: > It is in rawhide now. > > > On 02/10/2016 11:46 AM, Muayyad AlSadi wrote: > > > Well we probably need you guys playing wit

Re: [atomic-devel] Reducing the footprint of the Fedora docker base image

2016-02-12 Thread Muayyad AlSadi
does a container need to decompress that file at all? On Fri, Feb 12, 2016 at 9:30 PM, Matthew Miller wrote: > On Thu, Feb 11, 2016 at 09:21:27AM -0500, Daniel J Walsh wrote: > > > Compress cracklib > > > gzip -9 $OSROOT/usr/share/cracklib/pw_dict.pwd > > Why isn't this the default? > > https

Re: [atomic-devel] Reducing the footprint of the Fedora docker base image

2016-02-11 Thread Muayyad AlSadi
> Why isn't this the default? no, this saved 5MB -rw-r--r--. 1 root root 8.3M Jun 17 2015 /usr/share/cracklib/pw_dict.pwd -rw-r--r--. 1 root root 3.6M Jun 17 2015 /usr/share/cracklib/pw_dict.pwd.gz and regarding /usr/lib/locale/locale-archive I guess it's the biggest elephant -rw-r--r--. 1 roo

Re: [atomic-devel] Reducing the footprint of the Fedora docker base image

2016-02-11 Thread Muayyad AlSadi
here are what I install bash grep tar coreutils findutils rpm sed cpio cyrus-sasl file nc file-libs gawk xz openssh-server vi setup filesystem man passwd sudo iproute procps-ng iputils which net-tools psmisc sometimes when I over optimize I replace systemd (by a fake runtime rpm that claim to pro

Re: [atomic-devel] Concerns about pushing Docker 1.10 into Fedora23

2016-02-10 Thread Muayyad AlSadi
so > we can figure out how to fix it. > > > On 02/10/2016 03:22 AM, Muayyad AlSadi wrote: > > my concern is the built in DNS in new docker 1.10 and how to disable it to > use the one provided by freeipa and dnsmasq backed by consul or skydns > > > > On Tue,

Re: [atomic-devel] Concerns about pushing Docker 1.10 into Fedora23

2016-02-10 Thread Muayyad AlSadi
my concern is the built in DNS in new docker 1.10 and how to disable it to use the one provided by freeipa and dnsmasq backed by consul or skydns On Tue, Feb 9, 2016 at 6:04 PM, Jason Brooks wrote: > > > - Original Message - > > From: "Josh Berkus" > > To: atomic-devel@projectatomic.i

Re: [atomic-devel] dockerlite the fedora way

2016-01-04 Thread Muayyad AlSadi
Antonio gave it to me https://github.com/nalind/graphc On Mon, Jan 4, 2016, 5:51 PM Daniel J Walsh wrote: > Nalin has been working on an update to this, but I was unable to find his > github. > > Nalin? > > > On 01/02/2016 07:54 AM, Muayyad AlSadi wrote: > > >&g

Re: [atomic-devel] dockerlite the fedora way

2016-01-02 Thread Muayyad AlSadi
>> Yes critical to this is to get the graphdriver (COW File Systems) out as a separate package. graphc so to speak. We are working on this. > is there a link for graphc? I guess I found it https://github.com/willmtemple/graphc On Sat, Jan 2, 2016 at 2:36 PM, Muayyad AlSadi wrote:

Re: [atomic-devel] dockerlite the fedora way

2016-01-02 Thread Muayyad AlSadi
> >> On Mon, 2015-11-02 at 13:43 +0200, Muayyad AlSadi wrote: >> > > systemd-importd since v221 >> > >> > awesome! is this in F23? >> > >> >> Yes, Fedora 23 has v222. Note that `machinectl` is the correct name for >> the command: &g

Re: [atomic-devel] dockerlite the fedora way

2016-01-02 Thread Muayyad AlSadi
> Yes critical to this is to get the graphdriver (COW File Systems) out as a separate package. graphc so to speak. We are working on this. is there a link for graphc? and what does On Mon, Nov 2, 2015 at 3:49 PM, Pavel Odvody wrote: > On Mon, 2015-11-02 at 13:43 +0200, Muayyad

Re: [atomic-devel] dockerlite the fedora way

2015-11-02 Thread Muayyad AlSadi
> systemd-importd since v221 awesome! is this in F23? On Mon, Nov 2, 2015 at 1:05 PM, Pavel Odvody wrote: > On Fri, 2015-10-30 at 22:58 +0200, Muayyad AlSadi wrote: > > Hi, > > > > dockerlite is way to provide minimal docker features using scripts on > &g

Re: [atomic-devel] dockerlite the fedora way

2015-10-31 Thread Muayyad AlSadi
s. > > Once you have graphc you can mount up an image in any of the backends that > Docker supports, Devmapper, Btrfs, > overlayfs and run a container on them. What would we need next to save a > layered image? > > > On 10/30/2015 05:15 PM, Muayyad AlSadi wrote: > > &g

Re: [atomic-devel] dockerlite the fedora way

2015-10-30 Thread Muayyad AlSadi
ich community of images and the ecosystem of build-tools On Fri, Oct 30, 2015 at 11:08 PM, Daniel J Walsh wrote: > > > On 10/30/2015 04:58 PM, Muayyad AlSadi wrote: > > Hi, > > > > dockerlite is way to provide minimal docker features using scripts on > > btrf

[atomic-devel] dockerlite the fedora way

2015-10-30 Thread Muayyad AlSadi
Hi, dockerlite is way to provide minimal docker features using scripts on btrfs and lxc https://github.com/docker/dockerlite maybe it was aimed to demonstrate how simple docker can be implemented. but I like that the idea of having containers independent of the daemon (ie. we can run non-root c

  1   2   >