cephalobox - a podman cephadm dev env - #112
Open
nizamial09 wants to merge 3 commits into
Open
Conversation
nizamial09
force-pushed
the
cephalobox
branch
6 times, most recently
from
August 1, 2026 16:35
e8fbd70 to
7ba6eef
Compare
it is still privileged container but its not typical podman in podman. instead cephadm runs manages services in the container's host namespace. I am trying to build it by bundling the quay.ceph.io images inside the cephalobox image so that bootstrap will be more faster Signed-off-by: Nizamudeen A <nia@redhat.com>
``` 2026-08-03 08:24:26,471 7fd7b49e4e00 ERROR ERROR: Not a directory: /etc/sysctl.d ``` and couple of other cephadm issues on cephadm check-host Signed-off-by: Nizamudeen A <nia@redhat.com>
adding focused privileges instead of `privilged: true` so that the container will only have what it needs and not more. and some general code cleanups Signed-off-by: Nizamudeen A <nia@redhat.com>
nizamial09
force-pushed
the
cephalobox
branch
2 times, most recently
from
August 4, 2026 10:04
ebf9c8d to
8d1f813
Compare
Member
Author
|
Things to improve
Wild goals
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
it is still
privilegedcontainer (not anymore, gave it a set of focused permission) but its not typical podman in podman. instead cephadm manages services in the container's host namespace.I am trying to build it by bundling the quay.ceph.io images inside the cephalobox image so that bootstrap will be more faster
Cephalobox
A podman based cephadm deployment for deploying ceph. Instead of a full podman in podman, it leverages podman directly on container's host with privileged
capabilities, so that cephadm can natively deploy and manage services.
Quirks
Deployment
Strongly advised to use podman compose. docker compose is too much..
Build cephadm binary in your local. Since this favors mostly local development, generate the cephadm binary in your
src/cephadmdirectory inside ceph.Also build the front-end assets inside the
src/pybind/mgr/dashboard/frontendfolder in ceph.Populate the
CEPH_REPO_DIRin the .env file to your local directory so that it reads your local code.use the image you want, supports
main,umbrellaandtentacle. Prebundling the image so that we don't need to pull it everytime we start a cluster.Provide the correct image in .env file's
CEPHALOBOX_IMAGE. defaults torhcsdashboard/cephalobox:main.Pull the image
Limitation
Co-Authored-by: Gemini