podman-kube.unit(5) File Formats Manual podman-kube.unit(5) (NAME) podman-kube.unit - systemd YAML Quadlet (SYNOPSIS) name.kube (DESCRIPTION) Kube .kube [Kube] podman kube play . ExecStart=podman kube play file.yml Podman . systemd . Yaml YAML . (USAGE SUMMARY) .kube podman-system- generator .service systemd podman kube play . : systemctl --user start name.service (OPTIONS) [Kube] : +-----------------------------------+--------------------------------------------------------------------------------------------------+ | [Kube] | podman kube play | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |AutoUpdate=registry | --annotation "io.containers.autoupdate=registry" | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |ConfigMap=/tmp/config.map | --configmap /tmp/config.map | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |ContainersConfModule=/etc/nvd.conf | --module=/etc/nvd.conf | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |ExitCodePropagation=how | | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |GlobalArgs=--log-level=debug | --log-level=debug | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |KubeDownForce=true | --force ( podman kube down) | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |LogDriver=journald | --log-driver journald | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |Network=host | --network host | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |PodmanArgs=--annotation=key=value | --annotation=key=value | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |PublishPort=8080:80 | --publish 8080:80 | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |SetWorkingDirectory=yaml | WorkingDirectory YAML | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |UserNS=keep-id:uid=200,gid=210 | --userns keep-id:uid=200,gid=210 | +-----------------------------------+--------------------------------------------------------------------------------------------------+ |Yaml=/tmp/kube.yaml | podman kube play /tmp/kube.yaml | +-----------------------------------+--------------------------------------------------------------------------------------------------+ [Kube] : AutoUpdate= (podman-auto-update(1)). AutoUpdate . : o registry: ( quay.io/podman/stable:latest) . (pull) . (Image ID) Podman / . o local: Podman . Podman systemd Quadlet (restart) . o name/(local|registry): Podman local registry . ConfigMap=path ConfigMap YAML path . ( Podman ) . ContainersConfModule=module containers.conf(5). . ExitCodePropagation=how PID systemd. : - all: ( ) - any: - none: none . GlobalArgs= podman . Podman (generator) . . (escape) . . KubeDownForce=true (volumes) podman kube down. --force Podman . LogDriver=driver (logging) . k8s-file journald none passthrough passthrough- tty json-file k8s-file . ( journald). podman info . $ podman info --format '{{ .Host.LogDriver }}' journald passthrough (stdin stdout stderr) . Podman ( WSL2) tty TIOCSTI . passthrough-tty passthrough TTY . Network=mode . : o name .network Podman systemd-$name systemd $name-network.service . Quadlet $name.network . : .network . o name .container $name.container . systemd $name.service . : .container . mode : o bridge[:OPTIONS,...]: (bridge) . (rootful) . : o alias=name: . o ip=IPv4: IPv4 . o ip6=IPv6: IPv6 . o mac=MAC: MAC . o interface_name=name: . o host_interface_name=name: . netavark . netavark . (rootless) rootlessport . rootless_port_forwarder="pasta" [network] containers.conf(5) pasta ( pesto) IP . . IPv4 mac --network bridge:ip=10.88.0.10,mac=44:33:22:11:00:99 . o < >[:OPTIONS,...]: podman network create . bridge . --network . --network bridge . o none: . o container:id: . o host: . : (Unix domain sockets) TCP/UDP localhost . . o ns:path: . o private: . bridge pasta . o pasta[:OPTIONS,...]: pasta(1) (user-mode). . IPv4 IPv6 . IP . pasta(1) . pasta(1) --config-net --no-map-gw . --map-gw pasta ( pasta(1) ). DNS --dns-forward 169.254.1.1 (resolver) resolv.conf(5) . IP --dns-forward . host.containers.internal /etc/hosts --map-guest-addr 169.254.1.2 . IP . TCP UDP ( --publish Podman -t/-u pasta) -t none -u none . -T none -U none . containers.conf(5) pasta_options network . : o pasta:--map-gw: . o pasta:--mtu,1500: MTU tap . o pasta:--ipv4-only,-a,10.0.2.0,-n,24,-g,10.0.2.2,--dns- forward,10.0.2.3,-m,1500,--no-ndp,--no-dhcpv6,--no-dhcp: IPv6 10.0.2.0/24 tap0 10.0.2.2 DNS 10.0.2.3 MTU NDP DHCPv6 DHCP. o pasta:-I,tap0,--ipv4-only,-a,10.0.2.0,-n,24,-g,10.0.2.2,--dns- forward,10.0.2.3,--no-ndp,--no-dhcpv6,--no-dhcp: MTU . o pasta:-t,auto,-u,auto,-T,auto,-U,auto: . o pasta:-T,5201: TCP 5201 loopback tap . PodmanArgs= podman . Podman . . (escape) . . PublishPort=[[hostIP:][hostPort]:]containerPort[/protocol] . hostPort containerPort . . hostIP 0.0.0.0 IPv4 [::] IPv6 . IP . hostIP IP v4 v6 ( ) . hostIP containers.conf(5) default_host_ips [network] . IP . default_host_ips = ["127.0.0.1", "::1"] localhost ipv4 ipv6 . hostIP . Podman TCP . UDP udp . TCP UDP --publish tcp udp. sctp . ( podman run -p 127.0.0.1::80). . podman port : podman port $CONTAINER $CONTAINERPORT. bridge pasta . rootlessport IP . rootless_port_forwarder="pasta" [network] containers.conf(5) pasta pesto IP . . SetWorkingDirectory=yaml WorkingDirectory [Service] systemd . podman kube play . yaml unit YAML Quadlet . WorkingDirectory [Service] .kube . WorkingDirectory [Service] Quadlet SetWorkingDirectory . UserNS=mode (user namespace) . --userns : - --pod --userns . - PODMAN_USERNS . - userns containers.conf . - --userns=host . --userns="" ( ) --userns=host . GIDMap= UIDMap= SubUIDMap= SubGIDMap= . --userns= (Rootless): +------------------------+------------------------------------+---------------------------------------+ | | | | +------------------------+------------------------------------+---------------------------------------+ |auto | $UID | nil ( UID | | | | | | | | | | | | | | | | .) | +------------------------+------------------------------------+---------------------------------------+ |host | $UID | 0 ( | | | | | | | | | | | | | | | | .) | +------------------------+------------------------------------+---------------------------------------+ |keep-id | $UID | $UID ( | | | | | | | | UID | | | | .) | +------------------------+------------------------------------+---------------------------------------+ |keep-id:uid=200,gid=210 | $UID | 200:210 ( | | | | | | | | UID GID | | | | | | | | .) | +------------------------+------------------------------------+---------------------------------------+ |nomap | $UID | nil ( UID | | | | | | | | | | | | | | | | .) | +------------------------+------------------------------------+---------------------------------------+ mode : auto[:OPTIONS,...]: . o (rootful mode): --userns=auto containers /etc/subuid /etc/subgid Podman . : containers:2147483647:2147483648. o (rootless mode): /etc/subuid /etc/subgid . --userns=auto UID . subuid(5) . UID GID containers . UID . UID GID size . --userns=keep-id subuid subgid . --userns=nomap subuid subgid . --userns=auto --userns=nomap --userns=keep-id . auto: o gidmapping=CONTAINER_GID:HOST_GID:SIZE: GID . o size=SIZE: . --userns=auto:size=8192. size auto . o uidmapping=CONTAINER_UID:HOST_UID:SIZE: UID . UID GID gidmapping uidmapping @ . podman . UIDMap= . container:id: . host "" ( ): . . keep-id: UID:GID . (root) . init UID . USER --user . keep-id: o uid=UID: UID . o gid=GID: GID . o size=SIZE: . . root . nomap: UID:GID . (root) . ns:namespace: . Yaml=path YAML . (EXAMPLES) YAML : [Unit] Description=A kubernetes yaml based service Before=local-fs.target [Kube] Yaml=/opt/k8s/deployment.yml [Install] # Start by default on boot WantedBy=multi-user.target default.target (SEE ALSO) podman-kube-generate(1), podman-kube-play(1), podman-systemd.unit(5), systemd.unit(5) podman-kube.unit(5)