How to use localhost Podman Images, noob question

[maxfridbe]

If I build a podman image locally,
what command like
rpm-ostree rebase --experimental ostree-unverified-registry:localhost/frank:latest
Can I use to have ostree use the image i just built.

[xynydev]

You have to set up a registry, you can google about it if you figure it out.
I remember somebody talking about it in the discord, so you could also check there.
I myself am not knowledgeable on this topic, just spending my time answering these discussions.

[marcoceppi]

This was from a few days ago. I still haven't tested this but it should theoretically work:

podman run -d -p 5000:5000 --restart=always --name registry registry:2

Then do a

podman build -t localhost:5000/frank:latest

Then a

podman push localhost:5000/frank:latest

Now you should be able to rpm-ostree rebase --experimental ostree-unverified-registry:localhost:5000/frank:latest

[marcoceppi]

Let me know if this works for you @maxfridbe and I can update the website with these details

[maxfridbe]

to /etc/containers/registries.conf.d/myregistry.conf I had to put:

[[registry]]
location = "localhost:5000"
insecure = true

then i could push.
also for those interested you can retag images you have pulled ex:
podman tag docker.io/library/mongo-express localhost:5000/mongo-express

[tepene]

you could also push with --tls-verify=false. Example: podman push --tls-verify=false registry.dev.local:5000/ublue-main:dev-latest
and a step-by-step guide is in the docs: https://ublue.it/CONTRIBUTING/#building-locally

[maxfridbe]

Would ostree be able to pull it then?

…

On Mon, Apr 24, 2023, 2:32 PM Stephan Lüscher ***@***.***> wrote: you could also push with --tls-verify=false. Example: podman push --tls-verify=false registry.dev.local:5000/ublue-main:dev-latest and a step-by-step guide is in the docs: https://ublue.it/CONTRIBUTING/#building-locally — Reply to this email directly, view it on GitHub <https://github.com/orgs/ublue-os/discussions/120#discussioncomment-5712165>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAUT36UH6VYS7H375JVTJEDXC3IN5ANCNFSM6AAAAAAWJ2X6GQ> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[tepene]

Unfortunately not, but the myregistry.conf is only needed on the VM where you want to test / install the image, it's not needed on the host where you develop. -> https://ublue.it/CONTRIBUTING/#on-the-vm-where-you-want-to-test-the-image

[castrojo]

We should just have a repo with all the self-hosting yaml files you need so you can just podman up a registry with the right configs, maybe look at some self signing stuff or whatever so if you have a homelab we set you up with some precanned service units. And maybe some wireguard configs or tips so that you can update yourself no matter what network you're on.

[tepene]

I can give it a try. I'm thinking of a podman pod with

• https://hub.docker.com/_/registry/ as container registry or something similar. It just has to be very simple
• https://github.com/jsha/minica as a simple CA

and in addition

• https://distrobox.privatedns.org/posts/run_libvirt_in_distrobox.html for managing virtual machines
• and an ansible playbook for deployment and configuration on host and vm

I can sketch that up in my private user space or if you want to assign me a project in the ublue organisation, I'm fine with that as well

[castrojo]

Yeah if you want to to prototype here then I'd be happy to give you a repo, what do you want to call it?

[tepene]

what about "blueforge", "devlab" or "ubuild".

[castrojo]

https://github.com/ublue-os/forge - feel free to invite who you think will be interested in helping!

[maxfridbe]

Great! with all this

/etc/containers/registries.conf.d/myregistry.conf I had to put:

[[registry]]
location = "localhost:5000"
insecure = true

podman run -d -p 5000:5000 --restart=always --name registry registry:2

Then do a

podman build -t localhost:5000/frank:latest

Then a

podman push localhost:5000/frank:latest

this works
rpm-ostree rebase --experimental ostree-unverified-registry:localhost:5000/frank:latest

[maxfridbe]

This makes it nice to build and reboot cycle, before pushing and getting official build, or maybe not even sharing your Containerfile

[castrojo]

Hey @tepene we just set up ublue.it/blog ... I think what you have in forge is looking good already, I think it'd be a great blog post!

[tepene]

Hey @castrojo. Thank you. It doesn't do very much yet but the foundations are in place. Let me include a playbook or two so there's something to look at and try out. After that, I'll be happy to write a blog post