Differences

This shows you the differences between two versions of the page.

--- centos8_containers [2019/10/05 11:55] – [Concepts] rpjday
+++ centos8_containers [2019/10/06 12:32] (current) – [Overview] rpjday
@@ Line 2: / Line 2: @@
 Discussion of [[https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/building_running_and_managing_containers/|"Building, running, and managing containers"]]
+Look into:
+  * Using the CRI-O Container Engine
+  * OCI image format, OCI-compatible container engines
+  * OpenShift
+  * pods (OpenShift)
+  * Create /etc/containers/nodocker to shut up info msg
+===== Images =====
+  * ubi8/rhel
+  * ubi8/rhel-minimal
+  * ubi8/rhel-init
+  * ubi8/rhel-rsyslog
+  * ubi8/support-tools
+  * ubi8/net-snmp
 ===== Packages =====
@@ Line 7: / Line 24: @@
 Installed (or to install):
-  * podman
+  * podman (manage containers)
-  * buildah
+  * buildah (build OCI-compliant container images)
-  * skopeo
+  * skopeo (copy images to and from registries)
+  * podman-docker
 Dependencies:
-  * runc
+  * runc (runtime client for OCI format containers)
   * containers-common
   * containernetworking-plugins
   * oci-systemd-hook
+  * oci-umount
   * container-selinux
+  * fuse-overlayfs
+  * slirp4netns
+Modules:
+<code>
+$ dnf module info container-tools
+</code>
 ===== Concepts =====
-Container use cases:
+OCI: Open Container Initiative
+==== Use cases ====
   * single-node
-  * multi-node ("distributed systems")
+  * multi-node (sometimes called "distributed systems")
+==== Core technologies ====
+  * cgroups
+  * namespaces
+  * SELinux
+==== Commands ====
+  * podman
+  * buildah
+  * skopeo
+  * runc
+===== registries.conf =====
+<code>
+# The only valid categories are: 'registries.search', 'registries.insecure',
+# and 'registries.block'.
+[registries.search]
+registries = ['registry.redhat.io', 'quay.io', 'docker.io']
+# If you need to access insecure registries, add the registry's fully-qualified name.
+# An insecure registry is one that does not have a valid SSL certificate or only does HTTP.
+[registries.insecure]
+registries = []
+# If you need to block pull access from a registry, uncomment the section below
+# and add the registries fully-qualified name.
+#
+# Docker only
+[registries.block]
+registries = []
+</code>