[pkg-go] Bug#1024809: podman systemd service running as user deletes socket file on termination

[Reinhard Tartler]

Control: tag -1 upstream

Hi Antoine,

Thanks for testing the podman package.

On Fri, Nov 25, 2022 at 12:15 PM Antoine Musso <hashar at free.fr> wrote:

> Package: podman
> Version: 3.0.1+dfsg1-3+deb11u1
> Severity: normal
>
> Dear Maintainer,
>
> I went to try running podman as a normal user using the systemd service
> and socket defined by the Debian package. Namely:
>
>   $ systemctl --user start podman.service
>
> The service requires podman.socket which creates:
>
>   /run/user/1000/podman/podman.sock
>
> podman-system-service(1) mentions the API listening services expires
> after 5 seconds and thus the service self terminate. Which is fine since
> a request made to the podman.sock would bring up the service again.
>
> However the service deletes the socket file upon completion and it is
> not recreated by podman.socket and the setup is broken.


> My workaround has been to make a copy of the service:
>
>  cp /lib/systemd/system/podman.service \
>          ~/.config/systemd/user/mypodman.service
>
> Amend it to no more relies on the podman.socket and instruct the service
> to stay up indefinitely by passing it --time 0:
>
>  ExecStart=/usr/bin/podman $LOGGING system service --time 0
>

That's an interesting find. It seems to me that you are trying to use
podman in a similar way like docker, albeit in rootless. While I'm not
really sure what's the point in using podman in this way, those systemd
user unit files are shipped upstream.

I've just checked that the most recent upstream version does not
pass --time 0 either:
https://github.com/containers/podman/blob/main/contrib/systemd/system/podman.service.in

May I ask you to please open an upstream issue at
https://github.com/containers/podman/issues/new and report back with the
issue number?

Thank you
-rt
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20221127/2f5a653c/attachment.htm>