Skip to content

Helper scripts for using podman for running less trusted desktop software in containers

Notifications You must be signed in to change notification settings

httk/desktop-containers

Repository files navigation

Desktop containers

This provides a set of helper scripts to set up containers using the container software 'podman' in non-root mode to more safely run typical desktop software.

The design is that each subdirectory of this repository represents either a general container (generic-*) or a container for running some specific software. Most of them uses a subdirectory home for the home directory shown to the running software, there may also be opt or local for /opt or /usr/local inside the containers. Refer to README.md in each subdirectory for more information.

Since the 'state' of the containers is stored in subdirectories, the containers themselves are essentially stateless. This means you can at any time run podman system reset to purge the containers, and then go back and follow the instructions below to re-build the containers you need. (Note: podman system reset deletes all podman images and containers, not just the ones associated with these scripts.)

Quickstart: build the fat container

To build the main container used, do:

  cd images/fat-u24
  ./build-gamescope.sh
  ./build.sh

This first builds the gamescope software useful for some containers and required to build the fat-u24 container, and then builds the fat-u24 container.

Test the container

cd ../.. cd generic-console ./exec.sh echo "hello world"

About

Helper scripts for using podman for running less trusted desktop software in containers

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages