Container platforms (docker, lxc, podman)

313 readers

1 users here now

A place to discuss everything related to Container platforms and runtimes. Docker, LXC, Podman, OpenShift, OCI, and more.

founded 1 year ago

MODERATORS

[email protected]

Connect 2 containers rootless with postman-compose? (discuss.tchncs.de)

submitted 1 month ago by [email protected] to c/[email protected]

6 comments fedilink hide all child comments

Hello,

I have two Podman containers. One container that contains Linkstack and another container for the Nginx Proxy Manager. Now I want the Nginx Proxy Manager to retrieve the website from the Linkstack container. Unfortunately this does not work.

I integrate the two containers in a network. I realize this with podman-compose.

First, I created the network with "podman network create n_webservice".

Compose.yaml

services: NGINXPM: networks: - n_webservice container_name: NGINXPM volumes: - /home/fan/pod_volume/npm/data/:/data/ - /home/fan/pod_volume/npm/letsencrypt/:/etc/letsencrypt ports: - 8080:80 - 4433:443 - 9446:81 image: docker.io/jc21/nginx-proxy-manager:latest linkstack: networks: - n_webservice container_name: linkstack ports: - 4430:80 image: docker.io/linkstackorg/linkstack networks: n_webservice: external: n_webservice

I have tried everything possible in the Nginx Proxy Manager with the entry, but unfortunately I can't get any further. The destinations http://linkstack:4430 and http://127.0.0.1:4430 are not working.

Can someone please help me how I can access the linkstack container from the NGINXPM container?

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 2 points 1 month ago (5 children)

I had the same issues when I first started out with podman. The solution I found was to make a pod and place the containers within the pod. They'll be able to access each other through localhost:port. If you need ports published outside the pod, then they'll need to be specified during pod creation.

I didn't use podman-compose, so I can't speak specifically to how you'll go about this with a compose yaml.

It took many pages of websites for me to find something I understood. I'll see if I can find which websites I used and post them in a bit.

[–] [email protected] 1 points 1 month ago (4 children)

Thank you 🙏 Can you post a sample for the configuration, please?

[–] [email protected] 2 points 1 month ago (1 children)

Took awhile, but here's how to get the previously mentioned article working at a basic level. I'll write this out for future people in case they come across this post.

If you would like to reset podman to factory default (i.e. absolutely nothing configured), then you can start with the below command. I used this a lot when testing out different things in podman to help give me a clean slate.

podman system reset --force

Create the pod and containers within the pod. Note the pod is treated like a container itself, so we publish the ports on the pod instead of the containers.

podman pod create --restart unless-stopped -p 8080:80 -p 4443:443 -h podhost testpod

podman run -dt --pod testpod --name httpd docker.io/jitesoft/lighttpd:latest

podman run -dt --pod testpod --name alpine docker.io/library/alpine:latest

And to test I did:

podman exec -it alpine apk update && apk upgrade

podman exec -it alpine apk add curl

podman exec -it alpine curl http://localhost

Which will return the default 404 page since lighttpd is not configured.

And then running curl outside the container on localhost will present with the same default 404 page:

curl http://localhost:8080

This may not fit your exact use-case, but with the article it should get you going. If using pods, macvlan, or slirp4netns, you should be headed in the right direction.

I'll repost the sources that led me down this path here:

Podman starting tutorial
https://github.com/containers/podman/blob/main/docs/tutorials/podman_tutorial.md

Podman network tutorial
https://github.com/containers/podman/blob/main/docs/tutorials/basic_networking.md

Redhat Container Networking article
https://www.redhat.com/sysadmin/container-networking-podman

Baeldung Communication Between Containers
https://www.baeldung.com/linux/rootless-podman-communication-containers

[–] [email protected] 2 points 1 month ago* (last edited 1 month ago) (1 children)

To do some further testing, I added a mariadb container to the pod, added mycli to the alpine container, and was able to connect to the mariadb database from the alpine container.

podman run -dt --pod testpod --restart unless-stopped --name testdb --env MARIADB_ROOT_PASSWORD=a_secret_pass \
--volume:/fake/path/databases:z docker.io/library/mariadb:11.2

This command is all one-line, but I added a line break for readability. I used MariaDB 11.2 because that's what I had on-hand from another project. Note the ":z" in the volume -- this is due to SELinux needing to give podman access to that directory.

podman exec -it alpine apk add mycli

podman exec -it alpine mycli -u root -p a_secret_pass

This connects to the database successfully and, as you can see, looks as if the database is running right within Alpine; however, the database is not accessible outside of the pod.

It's also worth noting that I had some trouble initially accessing a webapp from outside of my VM which was hosting the container. This was due to firewalld blocking the connection. Since I'm using AlmaLinux with SELinux, I had to add a firewalld rule to allow traffic on port 8080.

edit: 1) a capital was missed | 2) added info about firewalld

[–] [email protected] 1 points 1 month ago* (last edited 1 month ago)

Thank you. What can I do, if some containers use the same port? For example more than one nginx container in one pod?

Pod (NginX Proxy Manager :8080, Nginx1 :80, Nginx2 :80, Nginx3 :80)

load more comments (2 replies)