this post was submitted on 28 Mar 2025
2082 points (99.2% liked)

Technology

68244 readers
3891 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] sugar_in_your_tea@sh.itjust.works 4 points 5 days ago (1 children)
  1. that's really too bad, I hope that gets resolved soon
  2. that's a pretty old version of podman (4.3 looks like?); also, why have nested podman? My infra is something like this:
Bare Metal
├─ Rootless Podman
   ├─ Forgejo
├─ Rootless Forgejo Runner (planning to run on another machine entirely)
   ├─ <Actions Containers Run Here>

I doubt the extra level of nesting is the issue though. If your issue is networking, then maybe the version of podman is the issue, since they switched out the networking layer in 5.0. I upgraded for a related reason, though I'm still getting some odd issues (mostly w/ the DNS resolver).

I haven't gotten to cross-compiling just yet, nor have I needed to build a docker image since my projects are very much in the testing phase. But maybe I'll give it a shot soon, since it's better to catch these types of issues before it becomes a bigger problem.

[–] Clearwater@lemmy.world 2 points 5 days ago* (last edited 4 days ago)

I agree that it is quite possibly related to the version of Podman moreso than an inherent issue. I am currently satisfied, however, and have no desire to fiddle with it any more... Or at least until Debian 13 gets released.

My use of PinP is almost entirely for cleanliness. It allows me to more easily wipe the build environment (clear out space, troubleshooting). It also mildly improves security as the 'untrusted' actions containers run on a separate environment from the important Forgejo container.

The workaround I use for the premade Docker actions not functioning is to simply install Podman as one of the build steps and use that instead, lol. (Some configuration required, but that's the gist.)