Chapter 2. Set up an air-gapped environment
You can set up the components of Red Hat build of Podman Desktop in a secure, air-gapped environment. The core challenge is mitigating the application’s reliance on automatic online downloads. However, the solution requires the following workflow:
- Pre-fetching: You must manually download all required components, such as Kind or Docker Compose binaries, from official GitHub release pages using an internet-connected machine.
- Manual installation: You must securely transfer all the downloaded components to the air-gapped environment. Then, install by running the component installer.
-
Configuration: You must place all supporting binaries in specific directories recognized by the system’s
Pathvariable. For example, use/usr/local/bin/or a custom Windows directory. This allows Red Hat build of Podman Desktop to find and run the components correctly.
This manual approach ensures the container development environment is fully operational despite the lack of external network connectivity.
| Component | Platform | Download Source (URL to fetch binary) | Installation location on air-gapped machine |
|---|---|---|---|
| Kind | Linux (AMD64) |
Kind GitHub releases: Download the |
Location:
Make the file executable with this command: |
| macOS (Intel/ARM64) |
Kind GitHub releases: Download the appropriate |
Location:
Make the file executable with this command: | |
| Windows (AMD64) |
Kind GitHub releases: Download the |
Location: Any directory in your system’s
Ensure the directory is added to your Windows | |
| Docker Compose (V2 plugin) | Linux (AMD64) |
Docker Compose GitHub releases: Download the appropriate |
Location (recommended plugin path):
Create the |
| macOS (Intel/ARM64) |
Docker Compose GitHub releases: Download the appropriate |
Location (recommended plugin path):
Create the | |
| Windows (AMD64) |
Docker Compose GitHub releases: Download the appropriate |
Location: Any directory in your system’s
Rename the downloaded file to | |
|
Bootable Containers ( | Linux (AMD64) |
|
Requires pre-loading a builder container image, such as |
| macOS and Windows |
The Bootable Containers extension provides the functionality to package an operating system into a single container image. Red Hat registry: Synchronize the | No host binary is required for macOS and Windows. The tooling runs inside the Podman machine VM. Ensure the Podman machine is in rootful mode. | |
| Red Hat OpenShift Local | All platforms | Red Hat Customer Portal: Download the Red Hat OpenShift Local bundle. |
Location: Extract the downloaded bundle to a working directory, for example,
The installation procedure requires the |
2.1. Download the bootc image builder on Linux Copy linkLink copied to clipboard!
The Bootable Containers extension supports offline workflows by leveraging pre-cached container images. To build disk images offline, you must first pull the required images and build the bootc container while online. Once these local artifacts are prepared, you can use the extension to generate disk images entirely offline. Supported formats include .qcow2, .raw, .vmdk, and others.
Prerequisites
- You have registered your Red Hat account to access a no-cost subscription.
- You have logged in to the Red Hat registry.
Procedure
Use an internet-connected machine to pull the appropriate
bootc-image-builderimage:podman pull registry.redhat.io/<rhel_version>/bootc-image-builder:<version_tag>where:
- <rhel_version>
-
Specifies the version of Red Hat Enterprise Linux (RHEL) that the image builder tool is based on. Replace this with a value, such as
rhel9orrhel10. - <version_tag>
-
Refers to the specific release version or lifecycle tag of the image builder tool. Replace this with a value, such as
10.1or9.7.
Pull the base
bootcimage you plan to use in yourContainerfile:podman pull registry.redhat.io/<rhel_version>/rhel-bootc:latestWhere:
- <rhel_version>
-
Specifies the version of RHEL you want to use as your base operating system. Replace this with a value, such as
rhel9orrhel10.
-
Build your
bootccontainer image from yourContainerfile. - Connect to your air-gapped machine.
-
Use the
bootcextension to build disk images in the required format.