Renee L. (Jun 22 2026 at 13:54): Renee L. (Jun 22 2026 at 13:54):I'm on a server where docker is disallowed for security reasons. Has anyone had success in using podman to quickstart dataverse instead?
I can see the "Hello from Payara - your server is now running!" page and sign in to the Administration Console but I don't see a document root with an index.html file or a place to sign in with the dataverseAdmin account.
Philip Durbin 🚀 (Jun 22 2026 at 13:58):Hmm, @Don Sizemore looked into this in #9731 but I'm not sure what the latest is.
Don Sizemore (Jun 22 2026 at 14:09):yes, that was where I broke down. has it really been 3 years?
Philip Durbin 🚀 (Jun 22 2026 at 14:12):@Renee L. do you get the same error as in that issue? Error: unknown flag: --driver
Renee L. (Jun 22 2026 at 14:14):I don't see that error.
Philip Durbin 🚀 (Jun 22 2026 at 14:15):gotcha
Philip Durbin 🚀 (Jun 22 2026 at 14:16):@Don Sizemore we have a somewhat related initiative over at #containers > Docker mode when spinning up EC2 instances
Do you think that within "docker mode" we should allow for either docker or podman?
Renee L. (Jun 22 2026 at 14:16):Needed to make a bunch of changes to the compose.yml file (mostly commenting things out) but eventually "podman compose up" seemed to be working. I just don't see a way to log in as dataverseAdmin, publish the root collection, create a collection etc.
Philip Durbin 🚀 (Jun 22 2026 at 14:18):Yeah, if you're only see the Payara screen it means the Dataverse war file has not been deployed.
Philip Durbin 🚀 (Jun 22 2026 at 14:19):And I'm sure http://localhost:8080/api/info/version doesn't work either. When Dataverse is properly deployed, it will show the version.
Philip Durbin 🚀 (Jun 22 2026 at 14:20):@Renee L. anything interesting in the logs for the dataverse container?
Renee L. (Jun 22 2026 at 14:21):http://localhost:8080/api/info/version says: {"status":"OK","data":{"version":"6.10.1","build":null}}
Philip Durbin 🚀 (Jun 22 2026 at 14:22):Oh! That's promising!
Philip Durbin 🚀 (Jun 22 2026 at 14:22):What if you refresh your browser? Sometimes the UI take a bit to come up.
Renee L. (Jun 22 2026 at 14:26):Mostly the dataverse container log says:
[#|2026-06-22T13:49:49.422+0000|SEVERE|Payara 7.2026.2|org.glassfish.admingui|_ThreadID=9122;_ThreadName=admin-thread-pool::admin-listener(5);_TimeMillis=178
2136189422;_LevelValue=1000;|
RestResponse.getResponse() gives FAILURE. endpoint = 'https://localhost:4848/management/domain/_list-resources'; attrs = '{appname=dataverse, modulename=m
icroprofile-openapi-servlet}'|#]
over and over. And I've already waited over the weekend. so I don't think waiting longer will help.
I do greatly appreciate the quick response here.
Renee L. (Jun 22 2026 at 14:27):OMG I just shift-refreshed and the page just changed.
Philip Durbin 🚀 (Jun 22 2026 at 14:32):That's great! What did you need to change in the compose file to get it to work? Do you want to make a pull request?!?
Renee L. (Jun 22 2026 at 14:58):Here's the version of compose.yml for podman. And I'd be happy to make a pull request. Would that be for https://github.com/gdcc/container-test or a different repository?
Philip Durbin 🚀 (Jun 22 2026 at 15:19):docker/compose/demo/compose.yml is the file in the main repo to edit.
As of 6.10.1 it looked like this: https://github.com/IQSS/dataverse/blob/v6.10.1/docker/compose/demo/compose.yml
So, yes! Please make a pull request! :heart:
Philip Durbin 🚀 (Jun 22 2026 at 15:39):@Renee L. oh, and please use #9731 in the name of your branch. 9731-podman or whatever. (Or feel free to create a fresh issue for this, if you like!)
Renee L. (Jun 22 2026 at 21:18):Certainly. I am still testing this build. Site email is not working yet for example.
Philip Durbin 🚀 (Jun 24 2026 at 14:50):@Renee L. hi! The Containerization working group has monthly meetings and I just added podman to our agenda for next week: https://docs.google.com/document/d/1hWKp9mk3KLx0c54HUCsJqHssV1ol66F-samectJ-6Ss/edit?usp=sharing
If you're able to make it, fantastic! We could even probably reschedule, if necessary!
Renee L. (Jun 24 2026 at 15:28):I can be there (virtually). May I also invite my 2 colleagues who helped with this?
Philip Durbin 🚀 (Jun 24 2026 at 15:32):Absolutely! The more the merrier! :tada:
Philip Durbin 🚀 (Jun 24 2026 at 15:32):Here's the topic where we coordinate that meeting: #containers > meetings
Philip Durbin 🚀 (Jul 10 2026 at 20:20):I downloaded the podman dmg for Mac. Wish me luck!
Philip Durbin 🚀 (Jul 10 2026 at 20:21):Meanwhile over at #containers > Docker mode when spinning up EC2 instances @Ash Manda said he doesn't mind adding podman support.
I know you said you're using podman on a server, @Renee L.
Philip Durbin 🚀 (Jul 10 2026 at 20:22):Sure enough (I'm testing on develop, not your new PR #12513):
✘ Container smtp Error response from daemon: container create: unknown mount option "uid=1000": invalid mount option 0.0s
Philip Durbin 🚀 (Jul 10 2026 at 20:25):We definitely want these changes:
diff --git a/docker/compose/demo/compose.yml b/docker/compose/demo/compose.yml
index 779cf37a93..d4b24f7fb1 100644
--- a/docker/compose/demo/compose.yml
+++ b/docker/compose/demo/compose.yml
@@ -42,8 +42,8 @@ services:
- ./data/app/data:/dv
- ./data/app/secrets:/secrets
tmpfs:
- - /dumps:mode=770,size=2052M,uid=1000,gid=1000
- - /tmp:mode=770,size=2052M,uid=1000,gid=1000
+ - /dumps:mode=770,size=2052M
+ - /tmp:mode=770,size=2052M
mem_limit: 2147483648 # 2 GiB
mem_reservation: 1024m
privileged: false
@@ -169,7 +169,7 @@ services:
#volumes:
# - ./data/smtp/data:/mail
tmpfs:
- - /mail:mode=770,size=128M,uid=1000,gid=1000
+ - /mail:mode=770,size=128M
Getting rid of uid=1000,gid=1000, I mean, as discussed in the last container meeting.
Philip Durbin 🚀 (Jul 10 2026 at 20:29):@Oliver Bertuch in #12513 @Renee L. has commented out these lines from the "dataverse" container:
tmpfs:
- /dumps:mode=770,size=2052M
- /tmp:mode=770,size=2052M
However, I seem to recall you saying we should keep them in some form.
This is the error I'm getting with them in:
dataverse | [Entrypoint] running /opt/payara/scripts/init_2_configure.sh
dataverse | mktemp: failed to create file via template ‘/tmp/tmp.XXXXXXXXXX’: Permission denied
Any ideas for me?
Philip Durbin 🚀 (Jul 10 2026 at 20:35):This is what Claude is telling me:
Philip Durbin 🚀 (Jul 10 2026 at 20:38):Oh good, it works.
Philip Durbin 🚀 (Jul 10 2026 at 20:39):That is, podman compose up works for me with this change (again, from develop):
diff --git a/docker/compose/demo/compose.yml b/docker/compose/demo/compose.yml
index 779cf37a93..8b41e40861 100644
--- a/docker/compose/demo/compose.yml
+++ b/docker/compose/demo/compose.yml
@@ -42,8 +42,8 @@ services:
- ./data/app/data:/dv
- ./data/app/secrets:/secrets
tmpfs:
- - /dumps:mode=770,size=2052M,uid=1000,gid=1000
- - /tmp:mode=770,size=2052M,uid=1000,gid=1000
+ - /dumps:mode=1777,size=2052M
+ - /tmp:mode=1777,size=2052M
mem_limit: 2147483648 # 2 GiB
mem_reservation: 1024m
privileged: false
@@ -169,7 +169,7 @@ services:
#volumes:
# - ./data/smtp/data:/mail
tmpfs:
- - /mail:mode=770,size=128M,uid=1000,gid=1000
+ - /mail:mode=1777,size=128M
I'm just not sure if I should be scared of that mode=1777. I'm always scared of chmod 777. :scream:
Philip Durbin 🚀 (Jul 10 2026 at 20:41):"1777 reminds me of 777 which I've always heard is poor security" -- me
"Fair instinct — 777/1777 on a real filesystem is usually a red flag because it lets any user read/write/delete anyone else's files. Here the risk profile is different:
So mode=1777 here is the same trust model as your OS's real /tmp, not an open-permissions container image or host mount. If you wanted tighter isolation you could restrict it to mode=1770 and have the container's entrypoint chown /tmp to the payara uid at startup — but that requires editing the image/entrypoint, not just the compose file. For this demo compose setup, 1777 is a reasonable, standard tradeoff.
✻ Sautéed for 9s" -- Claude
Philip Durbin 🚀 (Jul 10 2026 at 20:43):I'm seeing $ podman create -d --tmpfs /tmp:rw,size=787448k,mode=1777 my_image at https://docs.podman.io/en/stable/markdown/podman-create.1.html which makes me feel better.
Ash Manda (Jul 10 2026 at 20:44):Wow if it takes this much effort to make it work with podman, I'm not sure we'll be able to support it on Ansible. I was under the impression that just exchanging them will work because that's how I usually use it.
Ash Manda (Jul 10 2026 at 20:44):thank you for doing this
Philip Durbin 🚀 (Jul 10 2026 at 20:47):@Ash Manda well, is a pretty small diff, right?
Philip Durbin 🚀 (Jul 10 2026 at 20:59):@Renee L. I made a pull request into your pull request: https://github.com/rdlebeau/dataverse/pull/1
I hope it makes sense!
Philip Durbin 🚀 (Jul 13 2026 at 13:12):@Renee L. my thought process was to get the diff down to smallest possible diff first.
Philip Durbin 🚀 (Jul 16 2026 at 13:55):@Renee L. I added the "needs input" label. Please let me know what you think about my proposed changes. Thanks! :smile:
Renee L. (Jul 16 2026 at 14:31):@Philip Durbin 🚀 I merged your pull request.
Philip Durbin 🚀 (Jul 16 2026 at 14:31):@Renee L. wonderful! Thanks! Next up, what additional changes do we need? :sweat_smile:
Philip Durbin 🚀 (Jul 16 2026 at 14:32):Again, I'm testing on a Mac so I might be seeing different behavior that what you're seeing on Linux. :grimacing:
Philip Durbin 🚀 (Jul 16 2026 at 14:34):#12513 is now in a state where I'm happy to merge it.
Would multiple small PRs be ok with you?
Renee L. (Jul 16 2026 at 14:35):That's fine by me.
Renee L. (Jul 16 2026 at 14:39):I've made the dataverse container tmpfs changes (mode=1777, removing uid=1000,gid=1000) and they work on our test server, but we have an SMTP server that uses the university mail relay service so I have commented out the entire smtp section of compose.yml.
I don't think that answers any of your questions but I wanted to give an update.
Philip Durbin 🚀 (Jul 16 2026 at 14:41):Merged!
Philip Durbin 🚀 (Jul 16 2026 at 14:42):Yeah, maybe we should have a separate topic here in Zulip about that SMTP server. It makes sense in dev but probably not for a demo.
Philip Durbin 🚀 (Jul 16 2026 at 14:43):It doesn't have much to do with Podman, I mean.
Mahendra Paipuri (Jul 22 2026 at 14:47):Hello, I have created an issue to extend this PR to dev environment here. The only change we need to make is to bind SMTP server on a port > 1024 on host to avoid using privileged port. It worked like a charm on my Linux workstation. Would there be any interest if I put up a PR?
Philip Durbin 🚀 (Jul 22 2026 at 14:52):@Mahendra Paipuri yes, please! And that's for your other PR! We talked about it yesterday during Triage Tuesday.
Mahendra Paipuri (Jul 22 2026 at 14:53):Cheers @Philip Durbin 🚀 !! I ll do it over this weekend!
Philip Durbin 🚀 (Jul 28 2026 at 15:30):@Mahendra Paipuri thanks for creating #12566! We just talked about it during Triage Tuesday and moved it to "ready for review" on our board. I also added it to the agenda for the next Containerization working group meeting. Would you like to join to talk about it?
Mahendra Paipuri (Jul 28 2026 at 15:43):Hello @Philip Durbin 🚀 Yes, I can join the meeting to talk!! Its on August 6th, right?
Philip Durbin 🚀 (Jul 28 2026 at 15:44):@Mahendra Paipuri yes, exactly! I'm glad you can make it! You can check #containers > meetings for any last minute changes but usually we meet when we say we will. :smile:
Mahendra Paipuri (Jul 28 2026 at 15:45):Sure, I ll do that! Cheers!!
Renee L. (Aug 11 2026 at 21:41):You can update the solr schema using podman instead of docker with the command:
curl [website url]/api/admin/index/solr/schema | podman run -i --rm -v ./data/solr/data:/var/solr gdcc/configbaker:unstable update-fields.sh /var/solr/data/collection1/conf/schema.xml
where [website url] is your site's url, not 'http://localhost:8080'. This command is run outside of the containers.
Philip Durbin 🚀 (Aug 12 2026 at 01:48):good point
Renee L. (Aug 17 2026 at 19:51):Our dataverse test server is running nginx rather than Apache and using podman. I want to install Shibboleth. But the official dataverse instructions seem to be intended for Apache without containers. Can anyone tell me what my next steps should be?
Last updated: Aug 18 2026 at 08:27 UTC