I am toying with not having a Containerfile though
I am toying with not having a Containerfile though
act_runner working on podman on silverblue with selinux... where it can do all the stuff i need... the tricks were simply setting a symlink for /var/run/docker.sock -> /run/podman/podman.sock and setting label=false in my containers.conffleek add kind of functionalitysudo -E so it makes things difficultDBUS_SESSION_BUS_ADDRESS doesn't seem too hard to obtain with just needing the UID and usernamejust --choose
act_runnerfleek adduser@localhost ~> sudo -u user notify-send "hi"
GDBus.Error:org.freedesktop.DBus.Error.NoReply: Message recipient disconnected from message bus without replyingsudo -EDBUS_SESSION_BUS_ADDRESSjust --choosepodman run \
--user 1000:1000 \
--security-opt=no-new-privileges \
--cap-drop=ALL \
--security-opt label=type:nvidia_container_t \
docker.io/nvidia/cuda:12.2.0-devel-ubuntu20.04
Error: OCI runtime error: crun: error executing hook `/usr/bin/nvidia-container-runtime-hook` (exit code: 1) sudo -u user DISPLAY=:0 DBUS_SESSION_BUS_ADDRESS=unix:path=/run/user/1000/bus notify-send 'Hello world!' 'This is an example notification.'sudo -E -u user notify-send "hi"