17.7. Running Podman with extended privileges

Prerequisites

• The container-tools meta-package is installed.

Procedure

• Run the Podman container in the Podman container:

  $ podman run --privileged --name=privileged_podman \
    registry.access.redhat.com//podman podman run ubi10 echo hello
  Resolved "ubi10" as an alias (/etc/containers/registries.conf.d/001-rhel-shortnames.conf)
  Trying to pull registry.access.redhat.com/ubi10:latest...
  ...
  Storing signatures
  hello

• Run the outer container named privileged_podman based on the registry.access.redhat.com/ubi10/podman image.
• The --privileged option disables the security features that isolate the container from the host.
• Run podman run ubi10 echo hello command to create the inner container based on the ubi10 image.
• Notice that the ubi10 short image name was resolved as an alias. As a result, the registry.access.redhat.com/ubi10:latest image is pulled.

Verification

• List all containers:

  $ podman ps -a
  CONTAINER ID  IMAGE                            COMMAND               CREATED            STATUS                          PORTS   NAMES
  52537876caf4  registry.access.redhat.com/ubi10/podman               podman run ubi10 e...  30 seconds ago     Exited (0) 13 seconds ago               privileged_podman

  For more information, see the podman-run(1) man page on your system.