So far systemd containers (jailmaker) continues to work well for me after manually installing the systemd-container package.
I'm trying to find the commit which removed the systemd container package, in order to understand why this was done. So far no luck looking through commits in the 22.12.3 branch. Any update from your side?We're reviewing, but the issue seems to be incompatibility with Kubernetes. To make Kubernetes robust, there have to be restrictions. One or more of those restrictions is impacting systemd containers.
In the meantime, we'd recommend running a VM.
I'm trying to find the commit which removed the systemd container package, in order to understand why this was done. So far no luck looking through commits in the 22.12.3 branch. Any update from your side?
Since its a default package does that mean it is present in 23.10? Or has it been a deliberate removal for optimization sake? Because I genuinely believe this systemd jail method is going to be the most popular going forward. So it would be nice to see whether the community should account for working around (using apt, which isnt ideal) or just wait for the next release.I don't think we know....it wasn't deliberate or part of our test process. Probably a side-effect of improving stability of Kubernetes.
I'd be surprised if the mere fact of systemd-container package being installed (and not being used) would interfere with the stability of kubernetes. Would be great to have it back for the people who use jailmaker, but I fear we're going to have to use apt-install from now on...Probably a side-effect of improving stability of Kubernetes.
Turns out, systemd-nspawn is already back in the latest nightly TrueNAS-SCALE-23.10-MASTER-20230813-042924...
@morganL I've made a pull request to explicitly add systemd-container to the list of installed packages.
![]()
Add systemd-container to additional-packages list by Jip-Hop · Pull Request #1 · Jip-Hop/scale-build
As requested in NAS-123533. The systemd-container package, which provides the systemd-nspawn and machinectl commands, was included with SCALE releases prior to version 22.12.3. It was then gone for...github.com
I run Mailcow, which doesn't have any other supported option than docker compose.What would be a useful addition is examples of people who used this and normal Apps together without issues.
root@scale2[/mnt/nvme/jailmaker]# netstat -r Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface default pfSense 0.0.0.0 UG 0 0 0 br01 172.16.0.0 0.0.0.0 255.255.0.0 U 0 0 0 kube-bridge 172.18.0.0 0.0.0.0 255.255.0.0 U 0 0 0 docker0