containerspodmanredhat-containerspodman-compose

In a ROOTLESS podman setup, how to communicate between containers in different pods


I read all I could find, but documentation on this scenario is scant or unclear for podman. I have the following (contrived) ROOTLESS podman setup:

I keep certain containers in different pods specifically to avoid port conflict, and to manage containers as groups.

QUESTION:

Give the above topology, how do I communicate between, say, p1c1 and p2c1? In other words, step-by-step, what podman(1) commands do I issue to collect the necessary addressing information for pod1:p1c1 and pod2:p2c1, and then use that information to configure applications in them so they can communicate with one another?

Thank you in advance!

EDIT: For searchers, additional information can be found here.


Solution

  • Podman doesn't have anything like the "services" concept in Swarm or Kubernetes to provide for service discovery between pods. Your options boil down to:

    1. Run both pods in the same network namespace, or
    2. Expose the services by publishing them on host ports, and then access them via the host

    For the first solution, we'd start by creating a network:

    podman network create shared
    

    And then creating both pods attached to the shared network:

    podman pod create --name pod1 --network shared
    podman pod create --name pod2 --network shared
    

    With both pods running on the same network, containers can refer to the other pod by name. E.g, if you were running a web service in p1c1 on port 80, in p2c1 you could curl http://pod1.

    For the second option, you would do something like:

    podman pod create --name pod1 -p 1234:1234 ...
    podman pod create --name pod2 ...
    

    Now if p1c1 has a service listening on port 1234, you can access that from p2c1 at <some_host_address>:1234.


    If I'm interpreting option 1 correctly, if the applications in p1c1 and p2c1 both use, say, port 8080; then there won't be any conflict anywhere (either within the pods and the outer host) IF I publish using something like this: 8080:8080 for app in p1c1 and 8081:8080 for app in p2c1? Is this interpretation correct?

    That's correct. Each pod runs with its own network namespace (effectively, it's own ip address), so services in different pods can listen on the same port.

    Can the network (not ports) of a pod be reassigned once running? REASON: I'm using podman-compose(1), which creates things for you in a pod, but I may need to change things (like the network assignment) after the fact. Can this be done?

    In general you cannot change the configuration of a pod or a container; you can only delete it and create a new one. Assuming that podman-compose has relatively complete support for the docker-compose.yaml format, you should be able to set up the network correctly in your docker-compose.yaml file (you would create the network manually, and then reference it as an external network in your compose file).

    Here is a link to the relevant Docker documentation. I haven't tried this myself with podman.