21 lines
892 B
Markdown
21 lines
892 B
Markdown
# Podman runtime
|
|
|
|
The `podman_runtime` role installs and verifies the shared container runtime on
|
|
`ghostnet-ki`.
|
|
|
|
The initial scope is intentionally limited:
|
|
|
|
- install Podman from Debian 13 together with DNS and rootless-network helpers;
|
|
- require systemd and cgroup v2;
|
|
- create `/etc/containers/systemd` for future system Quadlets;
|
|
- keep the Podman API socket and automatic image-update timer disabled;
|
|
- verify Podman version, cgroup mode, the overlay storage driver and the
|
|
executable Quadlet generator; and
|
|
- run the Quadlet generator in dry-run mode without defining a workload.
|
|
|
|
The role does not pull images or create Production and Testing containers. It
|
|
also does not yet
|
|
choose between rootful system Quadlets and separate rootless service accounts.
|
|
That decision belongs to the environment design because it affects GPU access,
|
|
filesystem ownership and deployment privileges.
|