Podman是RedHat开发的容器调度器。为什么要用它而不用Docker呢?因为Docker只能以root权限运行,并且拉取镜像需要访问网络,安全策略难搞。
而Podman支持Rootless mode,且速度更快。因此我打算学习一下。
我的Deepin 20系统上面的apt源没有找到Podman。尝试用源码编译,没成功~
官方文档说Debian 11可直接安装。于是我用Docker运行一个Debian 11试试。
docker run -ti debian:11
在容器里,配置国内源
cat > /etc/apt/sources.list <<EOF
deb http://mirrors.163.com/debian/ bullseye main non-free contrib
deb-src http://mirrors.163.com/debian/ bullseye main non-free contrib
deb http://mirrors.163.com/debian-security/ bullseye-security main
deb-src http://mirrors.163.com/debian-security/ bullseye-security main
deb http://mirrors.163.com/debian/ bullseye-updates main non-free contrib
deb-src http://mirrors.163.com/debian/ bullseye-updates main non-free contrib
deb http://mirrors.163.com/debian/ bullseye-backports main non-free contrib
deb-src http://mirrors.163.com/debian/ bullseye-backports main non-free contrib
EOF
apt update
下载Podman
apt download podman
然后复制到宿主机来安装,当然缺少依赖包。但是挑重要的继续下载:
apt download conmon
apt download containernetworking-plugins
apt download crun
apt download golang-github-containers-common
apt download golang-github-containers-image
一个个复制到宿主机安装起来,竟然成功了!就这点依赖包,Golang大法好,哈哈哈~