A whirlwind tour of systemd-nspawn containers (2025)
11 points by janus
11 points by janus
I did enjoy this writeup of the basics of systemd-nspawn. Lately I'm trying to wrap my head around Podman Quadlets. The basics are simple enough, but running them as non-root users and ensuring they get started with system units seems like it could be simpler, compared to just specifying the user in a static systemd unit file.
oh, yeah, it's a pain in the arse. It's related to the lack of cross-manager API between systemd-as-pid1 and systemd as --user context. Because I really wanted to avoid the latter I've judged to get cowboy and give it a non-ephemeral user, with [Container]: UserNS=keep-id, PodmanArgs=--cgroups=disabled, and the usual [Install] WantedBy=multi-user.target